libtaskmanager: Limit launching new instances where service files do not exist
Original commit message(s)
- libtaskmanager: Limit launching new instances where service files do not exist
Libtaskmanager is full of legacy code to handle applications not providing application IDs and having workarounds for them.
This includes providing a "Open a New Window" entry for most applications unless explicitly inhibited. Where a matching .desktop is found the Exec line from there is used otherwise there is a fallback to launch the same binary again.
This latter fallback is not very sandbox aware and could be exploited to launch a different binary on the host. It's not especially exploitable, it relies on the user clicking an action, but we should close it anyway.