#794433 xdg-user-dirs: program acts without the user’s approval

Package:
xdg-user-dirs
Source:
xdg-user-dirs
Description:
tool to manage well known user directories
Submitter:
Thomas Grüttmüller
Date:
2015-08-03 00:12:05 UTC
Severity:
important
#794433#5
Date:
2015-08-03 00:09:25 UTC
From:
To:
Dear Maintainer,

1. The program creates folders in the user’s home directory

* without identifying itself to the user,
* without informing the user about the action, and
* without a chance for the user to opt out.

2. The program also repurposes existing folders in the user’s home directory

* by listing them under “~/.config/user-dirs.dirs” for use by other
programs,
* without informing the user about the step and the intended future use,
* and again without a chance to opt out.

3. In my case, I did not choose to install the “xdg-user-dirs” package. I
don’t know how it got on my computer. None of the rdepends apply, and even if
it was a dependency remnant, it should have long been autoremoved. Maybe the
package was slipped in during the Jessie upgrade.


Solution (to 1 and 2):

Before taking any action, the program should pop up a dialog to

* identify to the user,
* inform the user about the planned changes, and
* give the user a chance to opt out.

* *** Especially, there should be no repurposing of existing folders without
the users consent!!! ***

Regards,
  Thomas