Bug#749770: Impress listens to the world by default (0.0.0.0:1599)

[Rene Engelhard <rene@debian.org>]

Hi,

On Thu, May 29, 2014 at 05:04:28PM +0200, hrachj@gmail.com wrote:
> the Impress Remote (see e.g.
> https://f-droid.org/repository/browse/?fdid=org.libreoffice.impressremote) is
> enabled by default, making LibreOffice listen to the world. Additionaly, this
> feature is difficult to turn off (Impress must be started to get into Options,
> meaning you can't disable socket binding without actually binding)

Nah, it's easy to turn off as you say - but it has the "bug" there before being able
to deactivate, yes.

> How to reproduce:
> 
>  1. Start Impress
>  2. Observe 'netstat -tulpn | grep office' or telnet localhost 1599
> 
> tcp        0      0 0.0.0.0:1599            0.0.0.0:*               LISTEN
> 6513/soffice.bin
> udp        0      0 0.0.0.0:1598            0.0.0.0:*
> 6513/soffice.bin

Yeah..

> I think (at least desktop) applications shouldn't accept connections from the
> internet by default.

Probably. Will discuss with upstream.

Regards,

Rene