https://bugs.documentfoundation.org/show_bug.cgi?id=158781
Bug ID: 158781
Summary: Add support for unopkg to respect ExtensionManager
security keys
Product: LibreOffice
Version: Inherited From OOo
Hardware: All
OS: All
Status: UNCONFIRMED
Severity: enhancement
Priority: medium
Component: framework
Assignee: [email protected]
Reporter: [email protected]
Blocks: 116885
There are configuration keys under ooO.ExtensionManager/ExtensionSecurity/ that
can be used to disable the Add/Remove buttons in the Extension Manager dialog.
However if these are enabled, the unopkg still can install/remove extensions,
as it does not respect these keys.
1. Download any extension from https://extensions.libreoffice.org/
2. Go to Tools - Options - Advanced - Expert configuration
3. Search for extensionsecurity name
4. Set the DisableExtensionRemoval and DisableExtensionInstallation keys to
true
5. Close the dialogs, go to Tools - Extension Manager
-> The Add and Remove buttons are disabled: this is good
6. Go to the command line, try running from the installation directory the
instdir/program/unopkg add foo.oxt
command (or unopkg.com on Windows), where the foo.oxt is what you downloaded in
the first point.
-> the extension is installed. This is inconsistent with the intention of
setting these config keys set in step 4.
7. Use
instdir/program/unopkg list
to determine the internal identifier of the installed extension
8. Use
instdir/program/unopkg remove $identifier
to remove the just installed extension
-> this also succeeds, which is also inconsistent with step 4.
Version: 24.8.0.0.alpha0+ (X86_64) / LibreOffice Community
Build ID: d7577174b541e68158d228aa41192227c10a252f
CPU threads: 16; OS: Linux 5.15; UI render: default; VCL: gtk3
Locale: hu-HU (hu_HU.UTF-8); UI: en-US
Calc: threaded
Referenced Bugs:
https://bugs.documentfoundation.org/show_bug.cgi?id=116885
[Bug 116885] [META] Privacy and data security issues
--
You are receiving this mail because:
You are the assignee for the bug.
