dmenu-bind and TPE

ThinkRob · 2010-10-29 17:40:24

Hi,

I'd like to propose a change to the way that dmenu is currently configured.

I regularly run kernels with TPE (trusted path execution) or with noexec /home partitions, and as a result, having dmenu's launcher (dmenu-bind.sh) located in ~/.config/dmenu means that the handy Alt-F3 combo that I know and love does not work. Moving it to /usr/local/bin/dmenu-bind (or some other, similar path) along with changing openbox's rc.xml to reflect the new path would allow for the default CB install to work even on systems with kernels that enforce TPE (or noexec /home partitions).

Thoughts?

Thanks,
Rob

ThinkRob · 2010-10-29 17:57:29

To amend the above:

Simply moving the script to /usr/local/bin may not be sufficient, depending on the TPE implementation. With grsecurity, for example, execution of the dmenu-bind script will still be denied, as /usr/local/bin is owned by root:staff, and is group-writable. Moving the script will, however, solve the problem of systems that do not allow execution of binaries/scripts in /home.

Cheers,
Rob

CrunchBang Linux

SEARCH

#1 2010-10-29 17:40:24

dmenu-bind and TPE

#2 2010-10-29 17:57:29

Re: dmenu-bind and TPE

Board footer