https://bugs.freedesktop.org/show_bug.cgi?id=79847

          Priority: medium
            Bug ID: 79847
          Assignee: [email protected]
           Summary: Impress listens to the world by default
          Severity: normal
    Classification: Unclassified
                OS: All
          Reporter: [email protected]
          Hardware: All
            Status: UNCONFIRMED
           Version: 4.2.4.2 release
         Component: Impress Remote
           Product: LibreOffice

See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=749770:

--- snip ---
Package: libreoffice-impress
Version: 1:4.2.4-3
Severity: normal
Tags: upstream

Hello,

the Impress Remote (see e.g.
https://f-droid.org/repository/browse/?fdid=org.libreoffice.impressremote) is
enabled by default, making LibreOffice listen to the world. Additionaly, this
feature is difficult to turn off (Impress must be started to get into Options,
meaning you can't disable socket binding without actually binding)

How to reproduce:

 1. Start Impress
 2. Observe 'netstat -tulpn | grep office' or telnet localhost 1599

tcp        0      0 0.0.0.0:1599            0.0.0.0:*               LISTEN
6513/soffice.bin
udp        0      0 0.0.0.0:1598            0.0.0.0:*
6513/soffice.bin


How to turn off:

 1. Start Impress. This unfortunately enables the listening immediately.
 2. Tools -> Options -> Impress -> General -> [ ] Enable remote control

I think (at least desktop) applications shouldn't accept connections from the
internet by default.
--- snip ---

While it actually is easily disabeable (although it definitely listens until
you do so), I *do* think he has a point. It shouldn't listen per default.

Maybe we should get a config/UI option for avahi?

-- 
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
Libreoffice-bugs mailing list
[email protected]
http://lists.freedesktop.org/mailman/listinfo/libreoffice-bugs

Reply via email to