ubiquity desktop entry not "trusted"/not marked as executable bit

[Joshua Peisach]

For some reason on Xubuntu (Daily 22.10 kinetic images), when launching Ubiquity from the desktop, it says it is not trusted.

"Untrusted application launcher - The desktop file "ubiquity.desktop" is in an insecure location and not marked as executable. If you do not trust this program, click Cancel.

[Exec line in the .desktop file]"

ProblemType: Bug
DistroRelease: Ubuntu 22.10
Package: ubiquity 22.10.6
ProcVersionSignature: Ubuntu 5.15.0-27.28-generic 5.15.30
Uname: Linux 5.15.0-27-generic x86_64
NonfreeKernelModules: zfs zunicode zavl icp zcommon znvpair
ApportVersion: 2.22.0-0ubuntu4
Architecture: amd64
CasperMD5CheckResult: pass
CasperVersion: 1.473
CurrentDesktop: XFCE
Date: Sat Aug 27 22:56:16 2022
InstallCmdLine: BOOT_IMAGE=/casper/vmlinuz file=/cdrom/preseed/xubuntu.seed maybe-ubiquity quiet splash ---
LiveMediaBuild: Xubuntu 22.10 "Kinetic Kudu" - Alpha amd64 (20220827)
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: ubiquity
UpgradeStatus: No upgrade log present (probably fresh install)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Ubuntu QA Website (ubuntuqa)]

This bug has been reported on the Ubuntu ISO testing tracker.

A list of all reports related to this bug can be found here:
https://iso.qa.ubuntu.com/qatracker/reports/bugs/1987958

[Sean Davis (bluesabre)]

This also affects oem-config-prepare-gtk.desktop. Keeping on this report since they're likely the identical root cause.

[Sean Davis (bluesabre)]

Still present on Xubuntu Mantic 230917.

The Xfce Thunar docs have instructions on how to trust the executable:
https://docs.xfce.org/xfce/thunar/custom-actions#trust_multiple_desktop_files_at_once

For multiple files:
for f in %F; do sha256sum "$f" | awk '{print $1}' | xargs gio set "$f" metadata::xfce-exe-checksum && chmod +x "$f"; done

Just for ubiquity.desktop:
gio set ubiquity.desktop metadata::xfce-exe-checksum `sha256sum ubiquity.desktop | awk '{print $1}'`

After running this command, I can verify that the launcher is now trusted.

Is this something that can be added to Ubiquity, or should we make this part of Xubuntu's live session startup?

[Erich Eickmeyer (eeickmeyer)]

Unfortunately, lintian will throw a warning if you mark a .desktop file with an executable bit. Just saying.