From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tobias Geerinckx-Rice Subject: Re: Is using xdg-utils post-install safe? Date: Mon, 28 Oct 2019 20:12:34 +0100 Message-ID: <87blu0zntp.fsf@nckx> References: <11ed87ea281954cef56a0f703ade801f80301452.camel@gmail.com> Mime-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" Return-path: Received: from eggs.gnu.org ([2001:470:142:3::10]:37219) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1iPARo-0007zo-QV for guix-devel@gnu.org; Mon, 28 Oct 2019 15:13:02 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1iPARm-0007DF-4Q for guix-devel@gnu.org; Mon, 28 Oct 2019 15:12:59 -0400 Received: from tobias.gr ([2001:470:7405::1]:42550) by eggs.gnu.org with esmtps (TLS1.0:DHE_RSA_AES_256_CBC_SHA1:32) (Exim 4.71) (envelope-from ) id 1iPARl-0007A8-G2 for guix-devel@gnu.org; Mon, 28 Oct 2019 15:12:58 -0400 In-reply-to: <11ed87ea281954cef56a0f703ade801f80301452.camel@gmail.com> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: "Guix-devel" To: Jesse Gibbons Cc: guix-devel@gnu.org --=-=-= Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: quoted-printable Jesse, Jesse Gibbons =E5=86=99=E9=81=93=EF=BC=9A > I'm working on packaging The Powder Toy. When it first starts,=20 > it asks if > the user wants to install it. =E2=80=98Install=E2=80=99? That doesn't sound good. :-) . From=20my reading, that will embed a store file name into a .desktop=20 file somewhere in (each) user's $HOME, which will break sooner or=20 later. > When the user clicks confirm, it tries to use > xdg-desktop-menu, xdg-mime, and xdg-icon-resource. > Is this a safe behavior with guix, or should I try to patch it=20 > out? > If it is safe, should I bother trying to install a desktop icon=20 > with guix if > the program will do that itself? Even if I'm wrong and it's =E2=80=98safe=E2=80=99, I don't see how this beh= aviour=20 is desirable. What is upstream trying to accomplish here? Do you=20 see how this would be helpful compared to doing things the=20 normally? If not, I think we have a responsibility towards our users to=20 install a copy of the above .desktop file and patch out any=20 xdg-desktop-menu calls. Same for MIME types and icons. Kind regards, T G-R --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfo+u0AlEeO9y5k0W2Imw8BjFSTwFAl23PaIACgkQ2Imw8BjF STxQsg//apHtmWOabAU7Y4W5ainQjNav6/8ciQA/lNr85CuVMmzpftXB3HuQ5JH7 3AYvp6MCL1t9474+k6FbVWeqCvcgG+JIvObCK44b+w9bk34V3FrBHCXoR5v0dUgr FYX8DKz7kMzm8trKBXaURWXPTpUT6pLtloPFeDGye0uUmzZMa4quDxSts7pFL6y7 7CrjMi2RgO6H9PXL8rAsntFH+8A5/ErgG/yTVLCo5LjlcFcmB6LAGYYhUNZmL0XJ 2qjCEfge/Lpf8xc0xU7F3wf4T61D1ukOE6ijV2491B/NZM4CEG0E5uohggPZNuLu EFnSYSu3sfRt4iuaM9LT8ZhXkspFVFXdgccxliw62votgW5G5YhGivUwaeAdLlEU ZsLybPP+PSDQuz0F9H+bckR8msqdD4Ti/xMd2L7/NnRLEzNhGq6MALlBAKxRvJtN X4RlhWCaRsCPs5afgy8fXOqmaKf4dDTAdP1PMAnWyjIdvhfjA/rZnAjUtphMzhrn sMdgRXa5it1+avfetrAVoESsSDAkauawOOv1E2wiQbcekA/V9cPnukXhhbL86b1F d3EXzofiB72/hogWDCkUI2dS1xL83V9lpKua6llnOYPRLzPPKGfOWUqGrkFqX8lT SEzpDyEtpqAk2dlfJqo5CAbOHUiunH26bm8uOFUKBba6tMXy08E= =X5Np -----END PGP SIGNATURE----- --=-=-=--