[CentOS] "Untrusted application launcher (desktop launchers)"

[Phil Wyett]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sun, 2019-04-28 at 14:25 -0400, Robert Heller wrote:
> At Sun, 28 Apr 2019 18:53:21 +0100 CentOS mailing list <centos at centos.org>
> wrote:
> 
> > 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > On Sun, 2019-04-28 at 12:11 -0400, Robert Heller wrote:
> > > I am having this problem on Ubuntu 18.04 -- I manage a batch of desktop
> > > machines with some convience desktop launchers, which gnome3 insists are
> > > "untrusted". With some general websearching reveals that this is a
> > > *GNome3*
> > > so-called "security" issue
> > > (https://gitlab.gnome.org/GNOME/nautilus/commit/1630f5348). I found a
> > > thread
> > > on the CentOS Forums (I don't have an account there), where another
> > > sysadmin
> > > is strugling with this issue:
> > > 
> > > https://www.centos.org/forums/viewtopic.php?f=47&t=65864&start=10
> > > 
> > > If anyone has come up with a script that can be dropped into 
> > > ~/.config/autostart/ to "fix" this "feature" of gnome3 I would be
> > > interested 
> > > in it.
> > > 
> > > 
> > 
> > Hi,
> > 
> > Just chmod +x the desktop files.
> 
> That is NOT the problem...
> 
> > 
> > That or teach the users how to do things correctly.
> > 
> 
> Oh, yeah, you really think I am going to get very far telling *non-techies*
> to:
> 
> 1) Open up a terminal (right-click on the desktop and select "Open Terminal")
> 2) Type at the shell prompt (huh? what is a "shell prompt")
> 
>    /usr/local/bin/arduino &
>    
> OR
>    gnucash &
>    
> OR
> 
>    scratch &
>    
> These happen to be the three desktop shortcuts I am providing.  Yes, the last 
> two can be found by searching through all available applications, if they 
> know what to look for.  It is so much easier to say: click on the light 
> blue-green infinity sign for Arduino, click on the pile of money for GnuCash, 
> or click on the scratch cat for scratch.
> 
> 

Hi,

1. Do not jump to caps and shout at me. Not polite and will not get you
anywhere.

Ok, go back to a debian based list and learn how to bundle the applications
yourself. This way you can supply all the required desktop files. If you cannot
do this, get another job.

I would test this on debian stable as I was the author of the backported
security patch. However, I am not inclined to do so.

Regards

Phil

- -- 
*** If this is a mailing list, I am subscribed, no need to CC me.***

Playing the game for the games sake.

Twitter: kathenasorg
IRC: kathenas
Web: https://kathenas.org
Github: https://github.com/kathenas
GitLab: https://gitlab.com/kathenas

GPG: A0C3 4C6A AC2B B8F4 F1E5 EDF4 333F 60DC B0B9 BB77
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=AfW7
-----END PGP SIGNATURE-----