Earlier quoted context omitted.
> Even the common GUI platforms on Linux would require the user to manually save the file and explicitly marking the file as executable. If someone can find a way to drop a text file in my "~/.config/autostart" dir, next time I log in my Gnome desktop will happily execute the command present in the "Exec" line and it doesn't require the execute bit. I think something similar could be done using "~/.local/share/applic…
I think the point is -- do to that you would have to have the email client do it. While once it is out side the control of the email client -- as the quote suggest, it's up to the user -- not the email client to do the dirty work. The notion is that on windows, even a all knowing user who knew the email contained a virus after viewing it would be helpless as the email client already did the steps required to make the…
OK, I see your point, normal usage against exploits, and usually security goes against convenience.
I don't know if I'm overly paranoid, but in this specific case I've started long time ago to keep my autostart dir read only. At the same time I've dirs in my command path that are writable by my user (but those need the execute bit tho)...