GNOME Bugzilla – Bug 148440
Shows MIME security message, but MIME types are the same
Last modified: 2005-05-17 10:20:52 UTC
Distribution: Debian testing/unstable Package: nautilus Severity: normal Version: GNOME2.6. unspecified Gnome-Distributor: GNOME.Org Synopsis: Dumb error message Bugzilla-Product: nautilus Bugzilla-Component: general Bugzilla-Version: unspecified Description: Description of Problem: Click on a certain M$ Word doc. Results as follows: The filename "SideEventIndigene notes Sabine.doc" indicates that this file is of type "Microsoft Word-Dokument". The contents of the file indicate that the file is of type "Microsoft Word-Dokument". If you open this file, the file might present a security risk to your system. Really dumb, not? ------- Bug moved to this database by unknown@bugzilla.gnome.org 2004-07-25 14:11 ------- Unknown platform unknown. Setting to default platform "Other". Unknown milestone "unknown" in product "nautilus". Setting to default milestone for this product, '---' Setting to default status "UNCONFIRMED". Setting qa contact to the default for this product. This bug either had no qa contact or an invalid one.
Possible dupe of bug 145086 Cannot reproduce this
*** Bug 144643 has been marked as a duplicate of this bug. ***
I can reproduce this, of course. For the file that I initially reported on I noticed that Nautilus on the one hand says that it is an MS Word Document, while on the other hand the properties page says that it was application/rtf. Well, I think when you tell word to safe a file in Word 95 format (or so, no sure) it actually generates RTF while using the .doc extension. But I can't see how this might have confused nautilus, since it uses content sniffing anyway. Another file type I'm having fun with is the VCard format: Cannot open addressbook.vcf The filename "addressbook.vcf" indicates that this file is of type "Calendar or event document". The contents of the file indicate that the file is of type "address card". If you open this file, the file might present a security risk to your system.
bug 148440 gnome/nautilus I'm having similar problems. I keep getting emails from MS mail clients that send URLs as attachments with a "url" extension. I created a little shell script that extracts the URL from the file and opens it up in a web browser window - works fine from the command line. I associated the filetype to the shell script using the gnome "Open with other Application" facility. The behaviour is as expected if I open the file using the "Open With"-->"My Shell Script" context menu - i.e. the file is handled using my shell script. But when I double click on the file, I get a message similar to the one above - regardless of what I associate with the file. My error message is: ------------------------------------------------------------------------- Cannot open articledetail(2).url The filename "articledetail(2).url" indicates that this file is of type "(null)". The contents of the file indicate that the file is of type "Microsoft URL file". If you open this file, the file might present a security risk to your system. Do not open the file unless you created the file yourself, or received the file from a trusted source. To open the file, rename the file to the correct extension for "Microsoft URL file", then open the file normally. Alternatively, use the Open With menu to choose a specific application for the file. --------------------------------------------------------------------------- Other information regarding this problem: * The icons keep flipping from a blank page icon to one I have associated with the URL. (when I refresh the folder display I get the blank page icon - when I click on the the blank page icon once, I get the icon I have associated with the file.) * the fields in the "edit file type" dialog are filled in as follows: Description:Microsoft URL file MIME Type:application/x-mswinurl Category:Documents/World Wide Web Filename Extensions:url Default Application: ms_url_launcher * I had initially not associated an extension in the "Filename Extensions" field. Filling the field in has not mitigated the problem.
I can still see the .vcf problem here. Nautilus says it's trying to open a file of type .vcf and says that the content looks like it's of type GMC-link and thus displays the security warning since the filetype and content don't match. So it seems this is partly a problem in the file magic database (file(1) says it's a "awk script text" file) and also some problem with matching .vcf and magic. I don't have any old .doc files around to test the rtf/doc thing.
do you still have this issue? Can you attach a file doing this?
No. Now Nautilus says the content looks like RTF. But there is a little type that should be fixed. Do I need to open a separate bug for that? Der Dateiname »Side Event Renewables 2004.doc« deutet darauf hin, dass der Typ dieser Datei »Microsoft Word-Dokument« ist. Dem Dateiinhalt zu Folge handelt es sich jedoch um den Typen »Richt-Text-Format«. Daher könnte das Öffnen dieser Datei ^^^^^^^^^^^^^^^^^^^ ein Sicherheitsrisiko für Ihr System darstellen.
what version of shared-mime-info do you have, what is the description from /usr/share/mime/packages/freedesktop.org.xml for the rtf files?
0.15, from Sarge: <mime-type type="application/rtf"> <sub-class-of type="text/plain"/> <comment>Rich Text Format</comment> <comment xml:lang="az">Zəngin Mətn Formatı</comment> <comment xml:lang="cs">Rich Text Format</comment> <comment xml:lang="cy">Dogfen Testun Gyfoethog</comment> <comment xml:lang="de">Richt-Text-Format</comment> <comment xml:lang="fi">RTF-asiakirja</comment> <comment xml:lang="fr">Rich Text Format</comment> <comment xml:lang="hu">RTF-fájl</comment> <comment xml:lang="ko">Rich Text 형식</comment> <comment xml:lang="nl">Rijke Tekst Formaat</comment> <comment xml:lang="nn">Rik tekst-dokument</comment> <comment xml:lang="no">Rik tekst-format</comment> <comment xml:lang="sr">Обогаћени текстуални запис (RTF)</comment> <comment xml:lang="sv">Rikt textdokument</comment> <magic priority="50"> <match value="{\\rtf" type="string" offset="0"/> </magic> <glob pattern="*.rtf"/> </mime-type>
I'm not sure to understand your issue correctly. "Richt-Text-Format" is not a correct german version?
Yet another lousy translation that pursuits me ;). Seriously, I don't think he was referring to the wording but to the fact that - although RTF and .doc are very similar - Nautilus complained. In my opinion, "application/rtf" should be a MIME subclass of "application/vnd.ms-word", since [1] states: " .doc = Microsoft Word Document (usually) .rtf = Rich Text Format Document Word can read all RTF, but not all RTF readers can read DOC files. " This is most likely exclusively a freedesktop.org MIME type issue now that Christian Kellner committed a tremendous MIME type subclassing fixup bug to gnome-vfs. Johannes, am I right about the issue? [1] http://discuss.fogcreek.com/joelonsoftware/default.asp?cmd=show&ixPost=134589
@Sebastien: "Richt" doesn't seem to be correct English, either. @Christian: Yes, you are almost right. However, my initial complaint was that Nautilus reported both file types to be MS-Word docs even thought they apparantly were internally treated as distinct. Therefore Nautilus emitted nonsensical error messages such as: "The filename "SideEventIndigene notes Sabine.doc" indicates that this file is of type "Microsoft Word-Dokument". The contents of the file indicate that the file is of type "Microsoft Word-Dokument". If you open this file, the file might present a security risk to your system." At least this has been fixed now, it seems.
Indeed, it should have been "Rich".
only the .de version uses Richt: <comment>Rich Text Format</comment> is that bug to close now with the gnomevfs changes?
cf. https://bugs.freedesktop.org/show_bug.cgi?id=3311 for the bug in the German translation.