<html>
<head>
<base href="https://bugs.documentfoundation.org/">
</head>
<body><table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>Bug ID</th>
<td><a class="bz_bug_link
bz_status_UNCONFIRMED "
title="UNCONFIRMED - description of macro security level settings is misleading or wrong"
href="https://bugs.documentfoundation.org/show_bug.cgi?id=126574">126574</a>
</td>
</tr>
<tr>
<th>Summary</th>
<td>description of macro security level settings is misleading or wrong
</td>
</tr>
<tr>
<th>Product</th>
<td>LibreOffice
</td>
</tr>
<tr>
<th>Version</th>
<td>6.2.5.2 release
</td>
</tr>
<tr>
<th>Hardware</th>
<td>All
</td>
</tr>
<tr>
<th>OS</th>
<td>All
</td>
</tr>
<tr>
<th>Status</th>
<td>UNCONFIRMED
</td>
</tr>
<tr>
<th>Severity</th>
<td>trivial
</td>
</tr>
<tr>
<th>Priority</th>
<td>medium
</td>
</tr>
<tr>
<th>Component</th>
<td>LibreOffice
</td>
</tr>
<tr>
<th>Assignee</th>
<td>libreoffice-bugs@lists.freedesktop.org
</td>
</tr>
<tr>
<th>Reporter</th>
<td>Toni.Dietze+bugs.documentfoundation.org@mailbox.org
</td>
</tr></table>
<p>
<div>
<pre>Description:
Short version:
Correct the macro security level description of the High level. Current text:
<span class="quote">> Only signed macros from trusted sources are allowed to run.
> Unsigned macros are disabled.</span >
Proposal:
<span class="quote">> Only macros from trusted sources and signed macros (from any source) are allowed to run.
> Macros that are neither from a trusted source nor signed are disabled.</span >
(Please check the correctness.)
--------
Long version:
The macro security level settings of Libre Office provide the following
options:
<span class="quote">> _Low (not recommended).
> All macros will be executed without confirmation.
> Use this setting only if you are certain that all documents that will be opened are safe.
>
> _Medium.
> Confirmation required before executing macros from untrusted sources.
>
> H_igh.
> Only signed macros from trusted sources are allowed to run.
> Unsigned macros are disabled.
>
> _Very high.
> Only macros from trusted file locations are allowed to run.
> All other macros, regardless whether signed or not, are disabled.</span >
(cf. Tools/Options…/LibreOffice/Security/Macro Security…/Security Level; text
copied from xmlsecurity/uiconfig/ui/securitylevelpage.ui commit
67950f00989dff4640ba83e540673375a2c60a13)
The descriptions of some settings appear to be contradictory:
- The formulation of the High setting suggests that macros need to be signed
_and_ from a trusted source. Especially the second sentence “Unsigned macros
are disabled” strengthens the need of a signature.
- Also the text for Very high setting demands that macros come from a trusted
source, however, signing is not mentioned.
Looking at the help
(<a href="https://help.libreoffice.org/6.2/en-US/text/shared/optionen/macrosecurity_sl.html">https://help.libreoffice.org/6.2/en-US/text/shared/optionen/macrosecurity_sl.html</a>),
it seems to be the case that the High setting actually accepts macros that are
signed _or_ come from a trusted source. There we find the following
description:
<span class="quote">> Only signed macros from a trusted source are allowed to run. In addition, any macro from a trusted file location is allowed to run.</span >
(In my opinion, it is not good style to give a statement in a first sentence
but then alter the meaning of the statement in a second sentence, but that is
another issue.)
I propose to change the description of the High setting to:
<span class="quote">> Only macros from trusted sources and signed macros (from any source) are allowed to run.
> Macros that are neither from a trusted source nor signed are disabled.</span >
Note that I am only guessing here.
I strongly suggest to accurately recheck if the descriptions of each security
level matches the actual effect of that setting. Translations for localization
maybe have to be adapted as well.
Steps to Reproduce:
Read the settings at Tools/Options…/LibreOffice/Security/Macro
Security…/Security Level.
Actual Results:
The descriptions of the macro security levels seem contradictory.
Expected Results:
The descriptions shall be accurate.
Reproducible: Always
User Profile Reset: No
Additional Info:</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are the assignee for the bug.</li>
</ul>
</body>
</html>