Find a file
Carlos Soriano 3a22ed5b8e general: Don't allow launching binaries or programs in general
For long we used to support that since the desktop was part of Nautilus.
Also, back then we didn't have a Software app where you are expected to
installs apps. Back then it was common for apps to be delivered in
a tarball, nowadays that's out of question.

Now that the desktop is long gone, launching binaries and desktop files
from within Nautilus is not as useful. Not only that, but we are moving
towards a more sandboxed system, and we should use the standard and
system wide support for launching apps based on users choices.

We also are not able to be secure enough to handle this, as we saw in
the past we allowed untrusted binaries to be launched, and therefore
we had a CVE (CVE-2017-14604) for Nautilus. We are not being audited
(afaik) and we are not in a position that we can let this issues slip.

With that altogether, this prevents launching binaries or programs from
Nautilus.

Closes: https://gitlab.gnome.org/GNOME/nautilus/issues/184
2018-05-09 14:24:17 +00:00
.gitlab/issue_templates Update to include epic label 2018-04-30 15:50:00 +00:00
build-aux Flatpak: Allow access to gsettings folder 2018-04-08 18:09:28 +02:00
data general: Don't allow launching binaries or programs in general 2018-05-09 14:24:17 +00:00
docs general: refactor extension library 2018-02-09 06:32:38 +02:00
eel eel: string: fix middle truncation test cases 2018-03-21 10:05:45 +02:00
extensions general: Remove include guards in favor of pragma once 2018-03-19 14:43:38 +02:00
icons canvas-item: Remove code to draw stretch handles 2018-03-26 13:05:54 +03:00
libnautilus-extension eel: self-checks: Fix misaligned arguments 2018-03-19 14:49:44 +02:00
po Updated Czech translation 2018-05-08 22:41:21 +02:00
src general: Don't allow launching binaries or programs in general 2018-05-09 14:24:17 +00:00
subprojects Fix submodule funkiness 2018-03-19 20:48:31 +02:00
test test: Add file-utilities unit test 2018-04-04 12:10:05 +03:00
.gitattributes gitignore: Remove autotools related files. 2017-03-27 11:40:08 +02:00
.gitignore gitignore: Remove autotools related files. 2017-03-27 11:40:08 +02:00
.gitlab-ci.yml gitlabci: Add stop_review job. 2018-05-09 11:10:17 +00:00
.gitmodules libgd: move submodule to a subdirectory 2017-03-27 12:45:56 +03:00
LICENSE general: Assume Nautilus project is GPL3 2017-07-17 22:16:08 +02:00
meson.build build: Use install_data() to rename icons 2018-04-28 20:22:11 +03:00
meson_options.txt general: Allow running in separate instance 2018-03-18 22:28:08 +02:00
nautilus.doap A couple of additional missing details on the nautilus.doap file 2018-02-13 17:28:00 +00:00
NEWS release: prepare for 3.28.0 2018-03-13 07:10:57 +02:00
README.md README.md: change badge href 2018-01-08 16:09:41 +02:00

Nautilus

Pipeline status Code coverage

This is Nautilus, the file manager for GNOME.

Hacking on Nautilus

To build the development version of Nautilus and hack on the code see the general guide for building GNOME apps with Flatpak and GNOME Builder.

Mailing List

The nautilus mailing list is nautilus-list@gnome.org. Read the subscription information for more.

How to report issues

Report issues to the GNOME issue tracking system.