Activity log for bug #85338

Date Who What changed Old value New value Message
2007-02-15 13:08:19 Badger47 bug added bug
2007-02-15 13:29:50 Martin Pitt bug added subscriber Ubuntu Security Team
2007-02-15 13:30:09 Sebastien Bacher nautilus: statusexplanation Thank you for your bug. That's a wine problem, either it should not claim the MimeType from its .desktop to not be listed by nautilus "open with" or it should verify the permissions of the .exe before trying to run it
2007-02-15 13:34:22 Martin Pitt wine: status Unconfirmed Confirmed
2007-02-15 13:34:22 Martin Pitt wine: importance Undecided High
2007-02-15 13:34:22 Martin Pitt wine: statusexplanation Thank you for your bug. That's a wine problem, either it should not claim the MimeType from its .desktop to not be listed by nautilus "open with" or it should verify the permissions of the .exe before trying to run it This is absolutely right. Wine should not ship a desktop file that claims the MIME type, since then files can be run through wine which are not executable. The proper way to do this is to register a binfmt_misc interpreter for .exe files and execute them directly.
2007-02-16 22:32:46 Kees Cook wine: status Confirmed Fix Released
2007-02-16 22:32:46 Kees Cook wine: assignee keescook
2007-02-16 22:32:46 Kees Cook wine: statusexplanation This is absolutely right. Wine should not ship a desktop file that claims the MIME type, since then files can be run through wine which are not executable. The proper way to do this is to register a binfmt_misc interpreter for .exe files and execute them directly. I've removed the desktop file and added the binfmt-support bits, based on Debian's package.