diff options
| author | Michael Stahl <michael.stahl@allotropia.de> | 2023-11-08 16:12:08 +0100 |
|---|---|---|
| committer | Michael Stahl <michael.stahl@allotropia.de> | 2023-11-09 17:11:00 +0100 |
| commit | ec3ffe62685f9c5e944ae0924a9963fbe016a706 (patch) | |
| tree | 6b6acdbb727c8593409c087bbc5b5dedb01f4812 /desktop | |
| parent | 8e46dd9599bc84f60abf2d2d5625fa15076dfc80 (diff) | |
officecfg,desktop: add Office::Security::Net::AllowInsecureUNORemoteProtocol
This disables the "com.sun.star.office.Acceptor" UNO service that
handles the soffice "--accept" argument; now it can be disabled and
locked in configuration by system administrator.
Change-Id: I6747a128c3afa6a0cb351766365c8affc0b2614e
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/159151
Tested-by: Jenkins
Reviewed-by: Michael Stahl <michael.stahl@allotropia.de>
Diffstat (limited to 'desktop')
| -rw-r--r-- | desktop/Library_offacc.mk | 4 | ||||
| -rw-r--r-- | desktop/source/app/appinit.cxx | 4 | ||||
| -rw-r--r-- | desktop/source/offacc/acceptor.cxx | 7 |
3 files changed, 14 insertions, 1 deletions
diff --git a/desktop/Library_offacc.mk b/desktop/Library_offacc.mk index a7f560379627..fb1a162b2b90 100644 --- a/desktop/Library_offacc.mk +++ b/desktop/Library_offacc.mk @@ -11,6 +11,10 @@ $(eval $(call gb_Library_Library,offacc)) $(eval $(call gb_Library_use_sdk_api,offacc)) +$(eval $(call gb_Library_use_custom_headers,offacc,\ + officecfg/registry \ +)) + $(eval $(call gb_Library_use_libraries,offacc,\ comphelper \ cppu \ diff --git a/desktop/source/app/appinit.cxx b/desktop/source/app/appinit.cxx index 6eca704c7fb9..51b466c6b980 100644 --- a/desktop/source/app/appinit.cxx +++ b/desktop/source/app/appinit.cxx @@ -41,6 +41,8 @@ #include <unotools/tempfile.hxx> #include <vcl/svapp.hxx> #include <unotools/pathoptions.hxx> + +#include <iostream> #include <map> using namespace ::com::sun::star::uno; @@ -165,7 +167,7 @@ void Desktop::createAcceptor(const OUString& aAcceptString) } else { - SAL_WARN( "desktop.app", "Acceptor could not be created"); + ::std::cerr << "UNO Remote Protocol acceptor could not be created, presumably because it has been disabled in configuration." << ::std::endl; } } diff --git a/desktop/source/offacc/acceptor.cxx b/desktop/source/offacc/acceptor.cxx index b8612f668b22..9598466d9c5b 100644 --- a/desktop/source/offacc/acceptor.cxx +++ b/desktop/source/offacc/acceptor.cxx @@ -23,6 +23,7 @@ #include <com/sun/star/bridge/BridgeFactory.hpp> #include <com/sun/star/connection/Acceptor.hpp> #include <com/sun/star/uno/XNamingService.hpp> +#include <officecfg/Office/Security.hxx> #include <cppuhelper/supportsservice.hxx> #include <sal/log.hxx> #include <comphelper/diagnose_ex.hxx> @@ -240,6 +241,12 @@ extern "C" SAL_DLLPUBLIC_EXPORT css::uno::XInterface* desktop_Acceptor_get_implementation( css::uno::XComponentContext* context, css::uno::Sequence<css::uno::Any> const&) { + if (!officecfg::Office::Security::Net::AllowInsecureUNORemoteProtocol::get()) + { + // this is not allowed to throw + SAL_WARN("desktop", "UNO Remote Protocol is disabled by configuration"); + return nullptr; + } return cppu::acquire(new desktop::Acceptor(context)); } |