[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#998197: kdeconnectd: should not listen on all interfaces by default



Package: kdeconnect
Version: 21.08.2-1
Severity: normal
File: kdeconnectd
X-Debbugs-Cc: witold.baryluk@gmail.com

Dear Maintainer,

I do not use KDE. I use MATE, but do have many kde packages installed via
some high level kde packages. I did not install kdeconnect directly.

I did not start any KDE program.

Yet, kdeconnectd is running, and listening on port 1716 on all
interfaces, including the one on public internet directly. (I routinly
scan my computers from external networks, so this is how I found it out)

root@debian:~# ps aux | grep kdeco
user        3593  0.0  0.0 590196 70460 ?        SLl  Oct30   0:09 /usr/lib/x86_64-linux-gnu/libexec/kdeconnectd


root@debian:~# ss -apn | grep kdeconnect
u_str ESTAB      0      0                                                 * 799                                                * 11887   users:(("kdeconnectd",pid=3593,fd=7))                                                                                                                                                                                                                                                                
u_str ESTAB      0      0                                                 * 797                                                * 20707   users:(("kdeconnectd",pid=3593,fd=6))                                                                                                                                                                                                                                                                
u_str ESTAB      0      0                                                 * 42286                                              * 17937   users:(("kdeconnectd",pid=3593,fd=13))                                                                                                                                                                                                                                                               
u_str ESTAB      0      0                                                 * 5949                                               * 39446   users:(("kdeconnectd",pid=3593,fd=16))                                                                                                                                                                                                                                                               
u_str ESTAB      0      0                                                 * 28882                                              * 35128   users:(("kdeconnectd",pid=3593,fd=11))                                                                                                                                                                                                                                                               
u_str ESTAB      0      0                                                 * 42285                                              * 795     users:(("kdeconnectd",pid=3593,fd=3))                                                                                                                                                                                                                                                                
u_str ESTAB      0      0                                                 * 8474                                               * 2666    users:(("kdeconnectd",pid=3593,fd=15))                                                                                                                                                                                                                                                               
u_str ESTAB      0      0                                                 * 39447                                              * 11888   users:(("kdeconnectd",pid=3593,fd=17))                                                                                                                                                                                                                                                               
u_str ESTAB      0      0                                                 * 39448                                              * 17952   users:(("kdeconnectd",pid=3593,fd=18))                                                                                                                                                                                                                                                               
udp   UNCONN     0      0                                                 *:1716                                               *:*       users:(("kdeconnectd",pid=3593,fd=20))                                                                                                                                                                                                                                                               
tcp   LISTEN     0      50                                                *:1716                                               *:*       users:(("kdeconnectd",pid=3593,fd=21))      





Looking at kde connect, it looks like a cool project, but maybe some form
of explicit confirmation, or starting it first should be required, before
it activates like that?

I might be ok with ssh or http server doing this, but I do not think it
is good idea to do so by most other packages just by mere fact of
installing them, but not configuring them.

kdeconnect and nftlb are really the only two packages (out of 9013 on my
system) doing this, when they probably should not.

Regards,
Witold


-- System Information:
Debian Release: bookworm/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.15.0-rc7 (SMP w/32 CPU threads; PREEMPT)
Kernel taint flags: TAINT_UNSIGNED_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages kdeconnect depends on:
ii  fuse3                                    3.10.5-1
ii  kio                                      5.86.0-1
ii  kpeople-vcard                            0.1-2
ii  libc6                                    2.32-4
ii  libfakekey0                              0.3+git20170516-2
ii  libkf5configcore5                        5.86.0-1
ii  libkf5configwidgets5                     5.86.0-1
ii  libkf5coreaddons5                        5.86.0-1
ii  libkf5dbusaddons5                        5.86.0-1
ii  libkf5i18n5                              5.86.0-1
ii  libkf5iconthemes5                        5.86.0-1
ii  libkf5kcmutils5                          5.86.0-1
ii  libkf5kiocore5                           5.86.0-1
ii  libkf5kiofilewidgets5                    5.86.0-1
ii  libkf5kiogui5                            5.86.0-1
ii  libkf5kiowidgets5                        5.86.0-1
ii  libkf5notifications5                     5.86.0-1
ii  libkf5people5                            5.86.0-1
ii  libkf5pulseaudioqt3                      1.3-2
ii  libkf5service-bin                        5.86.0-1
ii  libkf5service5                           5.86.0-1
ii  libkf5solid5                             5.86.0-1
ii  libkf5waylandclient5                     4:5.86.0-1
ii  libkf5widgetsaddons5                     5.86.0-1
ii  libkf5windowsystem5                      5.86.0-1
ii  libqca-qt5-2                             2.3.4-1
ii  libqca-qt5-2-plugins                     2.3.4-1
ii  libqt5core5a                             5.15.2+dfsg-12
ii  libqt5dbus5                              5.15.2+dfsg-12
ii  libqt5gui5                               5.15.2+dfsg-12
ii  libqt5multimedia5                        5.15.2-3
ii  libqt5network5                           5.15.2+dfsg-12
ii  libqt5qml5                               5.15.2+dfsg-8
ii  libqt5quick5                             5.15.2+dfsg-8
ii  libqt5quickcontrols2-5                   5.15.2+dfsg-4
ii  libqt5waylandclient5                     5.15.2-4
ii  libqt5widgets5                           5.15.2+dfsg-12
ii  libqt5x11extras5                         5.15.2-2
ii  libstdc++6                               11.2.0-10
ii  libwayland-client0                       1.19.0-2+b1
ii  libx11-6                                 2:1.7.2-2+b1
ii  libxtst6                                 2:1.2.3-1
ii  plasma-framework                         5.86.0-1
ii  qml-module-org-kde-kirigami2             5.86.0-1
ii  qml-module-org-kde-kquickcontrolsaddons  5.86.0-1
ii  qml-module-org-kde-people                5.86.0-1
ii  qml-module-qt-labs-platform              5.15.2+dfsg-4
ii  qml-module-qtgraphicaleffects            5.15.2-2
ii  qml-module-qtmultimedia                  5.15.2-3
ii  qml-module-qtqml                         5.15.2+dfsg-8
ii  qml-module-qtquick-controls2             5.15.2+dfsg-4
ii  qml-module-qtquick-dialogs               5.15.2-2
ii  qml-module-qtquick-layouts               5.15.2+dfsg-8
ii  qml-module-qtquick-particles2            5.15.2+dfsg-8
ii  qml-module-qtquick-window2               5.15.2+dfsg-8
ii  qml-module-qtquick2                      5.15.2+dfsg-8
ii  sshfs                                    3.7.1+repack-2

kdeconnect recommends no packages.

kdeconnect suggests no packages.

-- no debconf information


Reply to: