Changes between Initial Version and Version 2 of Ticket #2881


Ignore:
Timestamp:
2017-09-19T19:39:57Z (7 years ago)
Author:
cypher
Comment:

Legend:

Unmodified
Added
Removed
Modified

  • Ticket #2881

    • Property Keywords security added

  • Ticket #2881 – Description

    initial v2  
    2121}}}
    2222
    23 This is should not be standard behavior for a number of reasons, among them the broader design principle that an application should never alter a user's pre-existing data (including filesystem metadata) without at least ''some'' form of input or indication that it is doing so, as well as, more seriously, the myriad of security-related concerns that stem from this behavior (particularly on Windows where the current working directory is always prepended to PATH).
     23This is should not be standard behavior for a number of reasons, among them the broader design principle that an application should never alter a user's pre-existing data (including filesystem metadata) without at least ''some'' form of input or indication that it is doing so, as well as, more seriously, the myriad of security-related concerns that stem from this behavior.
    2424
    2525Instead, all files placed into a magic-folder should retain their original permissions until changed by a user -- or, at least, at minimum, they should not "magically" become executable. :)