Click to See Complete Forum and Search --> : installed theme mounts windows???


bdg1983
06-13-2001, 02:12 PM
Hello all,

I had a weird experience and I thought that I might have a security problem.

I downloaded a theme/style from the mirror of themes.org at sourceforge called BluePrint. After installing it I wanted to delete the untared directory. It gave me an error saying that access denied to subdirectory blah blah. Well I investigated and for some reason this theme was putting files in my windows partition: /home/mimi/.kde/share/apps/mnt/windows/windows/subscriptions/desktop.ini

the ini file looks like this:
[.ShellClassInfo]
CLSID={F5175861-2688-11d0-9C5E-00AA00A45957}
Why on earth would any theme or style need to mount something from my windows partition??

Strike
06-13-2001, 08:52 PM
Originally posted by Mimi:
<STRONG>Well I investigated and for some reason this theme was putting files in my windows partition: /home/mimi/.kde/share/apps/mnt/windows/windows/subscriptions/desktop.ini</STRONG>

Your /home partition is your Windows partition? Nope. I don't know what that is supposed to be doing (it looks like a registry key that it was trying to add). Your Windows partition is safe as long as you don't mount it read-write for all users (which is hard to figure out how to do anyway, not even sure it's possible - I just move things to it as root).

bdg1983
06-14-2001, 02:07 AM
I hear what you are saying, Strike, but this file actually exists in my windows partition.
I could get there through the path I specified above, and have seen it when I was in Win.

Strike
06-14-2001, 02:23 AM
You must be mounting your windows drive at the insanely weird mount point of:

/home/mimi/.kde/share/apps/mnt/windows/

then. And you are mounting it with read-write permissions to the user. Bad idea. Don't do that. And don't use themes that put registry keys in places :)

Energon
06-14-2001, 01:00 PM
Originally posted by Strike:
<STRONG>not even sure it's possible</STRONG>


It is... you just have to mount it w/ the option of umask=000...