backport upstream to security issue

honor the setting for prompting when executing executable files on the desktop

plasma-desktop-folderview-security.patch

@@ -0,0 +1,33 @@
+From 771e57f3b2c19f4e6f867c01c2457ec87531b4cf Mon Sep 17 00:00:00 2001
+From: Kai Uwe Broulik <kde@privat.broulik.de>
+Date: Tue, 31 Jan 2017 15:07:42 +0100
+Subject: [Folder View] show script execution prompt when clicking item
+
+When clicking a file in FolderView, we should ask for whether to open or run a script depending on user settings.
+This is what Dolphin does.
+
+BUG: 375793
+FIXED-IN: 5.8.6
+
+Differential Revision: https://phabricator.kde.org/D4367
+---
+ containments/desktop/plugins/folder/foldermodel.cpp | 3 ++-
+ 1 file changed, 2 insertions(+), 1 deletion(-)
+
+diff --git a/containments/desktop/plugins/folder/foldermodel.cpp b/containments/desktop/plugins/folder/foldermodel.cpp
+index 758f7f3..1ba1245 100644
+--- a/containments/desktop/plugins/folder/foldermodel.cpp
++++ b/containments/desktop/plugins/folder/foldermodel.cpp
+@@ -509,7 +509,8 @@ void FolderModel::run(int row)
+         url.setScheme(QStringLiteral("file"));
+     }
+ 
+-    new KRun(url, 0);
++    KRun *run = new KRun(url, 0);
++    run->setShowScriptExecutionPrompt(true);
+ }
+ 
+ void FolderModel::rename(int row, const QString& name)
+-- 
+cgit v0.11.2
+

plasma-desktop.spec

@@ -4,7 +4,7 @@
 Name:    plasma-desktop
 Summary: Plasma Desktop shell
 Version: 5.8.5
-Release: 3%{?dist}
+Release: 4%{?dist}
 
 License: GPLv2+ and (GPLv2 or GPLv3)
 URL:     https://quickgit.kde.org/?p=%{name}.git
@@ -24,6 +24,10 @@ Source0: http://download.kde.org/%{stable}/plasma/%{version}/%{name}-%{version}.
 Patch100: plasma-desktop-5.8-default_favorites.patch
 
 ## upstream patches
+#
+# Folder view should honor kiorc settings
+# https://bugs.kde.org/show_bug.cgi?id=375793
+Patch200: plasma-desktop-folderview-security.patch
 
 ## upstream patches (master branch)
 
@@ -170,11 +174,11 @@ BuildArch: noarch
 %prep
 %setup -q
 
-## upstream patches
-
 ## downstream patches
 %patch100 -p1
 
+## upstream patches
+%patch200 -p1
 
 %build
 %ifarch s390 %{arm}
@@ -327,6 +331,10 @@ fi
 
 
 %changelog
+* Mon Feb 13 2017 Than Ngo <than@redhat.com> - 5.8.5-4
+- backport upstream to security issue
+  honor the setting for prompting when executing executable files on the desktop
+
 * Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 5.8.5-3
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild