Comment 25 for bug 313439

Revision history for this message
Kees Cook (kees) wrote :

This has already been solved by adding "cautious-launcher" to .desktop files that have MimeType and Exec lines, in line with the Ubuntu Executable Bit Policy: https://wiki.ubuntu.com/SecurityTeam/Policies#Execute-Permission%20Bit%20Required

$ egrep '^(Exec|MimeType)=' usr/share/applications/sun-java6-java.desktop
Exec=cautious-launcher %f /usr/lib/jvm/java-6-sun-1.6.0.24/bin/java -jar
MimeType=application/x-java-archive;application/java-archive;application/x-jar;

$ egrep '^(Exec|MimeType)=' usr/share/applications/openjdk-6-java.desktop
Exec=cautious-launcher %f /usr/lib/jvm/java-6-openjdk/bin/java -jar
MimeType=application/x-java-archive;application/java-archive;application/x-jar;