[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <d6b157bf500fefea7bafa7a0c0f00c6e@free.fr>
Date: Wed, 20 May 2026 12:41:23 +0200
From: gabriel.corona@...e.fr
To: oss-security@...ts.openwall.com
Subject: Re: PCManFM-Qt allows arbitrary files to be opened via
the org.freedesktop.FileManager1.ShowFolders method
> Checking whether a path is a file or
> directory can block I/O under special circumstances; so, it isn't an
> option in this case."
I am not sure I am following that argument …
When I am calling "$file-manager $some-path", I should be expecting to
actually
open up a file manager not something else which happens to actually
handle the file.
The file manager should not try to delegate to another program at all.
If we want the "automagically call the correct program" functionality,
we can use xdg-open / kde-open / dde-open / gnome-open / exo-open /
org.freedesktop.portal.OpenURI.OpenFile.
Gabriel
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
