Bug#749770: Impress listens to the world by default (0.0.0.0:1599)
Hi,
On Thu, May 29, 2014 at 10:35:52PM +0200, Rene Engelhard wrote:
> On Thu, May 29, 2014 at 05:04:28PM +0200, hrachj@gmail.com wrote:
> > the Impress Remote (see e.g.
> > https://f-droid.org/repository/browse/?fdid=org.libreoffice.impressremote) is
> > enabled by default, making LibreOffice listen to the world. Additionaly, this
> > feature is difficult to turn off (Impress must be started to get into Options,
> > meaning you can't disable socket binding without actually binding)
[...]
> > I think (at least desktop) applications shouldn't accept connections from the
> > internet by default.
>
> Probably. Will discuss with upstream.
No answer upstream in https://bugs.freedesktop.org/show_bug.cgi?id=79847 ...
I thought about simply disabling that option per default, but the problem
here is that this also would just disable the Bluetooth functionality (see [1])
- and not only the avahi one...
I am not sure whether we should do that.
The other option I see is to split _libsdlo.so_ (too bad this is buried
deep inside Draw :/) built against avahi out to a new libreoffice-impress-avahi
or somesuch (which then DOES listen per default but is not in the "default"
desktop set; given LO upstream afaics doesn't build with --enable-avahi that's
not a regression to upstreams binaries anyway) and keep a "normal" libsdlo.so
in libreoffice-draw...
Regards,
Rene
[1]
diff of user config before/after is basically:
-<item oor:path="/org.openoffice.Office.Impress/Misc/Start"><prop oor:name="EnableSdremote" oor:op="fuse"><value>false</value></prop></item>
+<item oor:path="/org.openoffice.Office.Impress/Misc/Start"><prop oor:name="EnableSdremote" oor:op="fuse"><value>true</value></prop></item>
Reply to: