[Libreoffice] How to disable addon installation
olivier.hallot at documentfoundation.org
Sat Apr 2 18:49:18 PDT 2011
I second your concern. Extensions are a potentially security hole and it
should be possible to install LibreOffice without the ability to install
extensions. The extension installer, expecially the GUI should be an
option at intall time.
It has been noted here:
If you want no extensions at all (can break something, I have not
tested), you must erase unopkg executables from your installation.
But if you want only to disable the GUI, de-register the proper dll in
the command prompt:
C:\Program Files\LibreOffice.org 3\Basis\program>..\..\URE\bin\regcomp
-revoke -r services.rdb -c
dll' from registry 'services.rdb' succesful!
Em 02-04-2011 05:41, Manuel Reimer escreveu:
> Manuel Reimer wrote:
>> As it's possible to install an addon by just passing it to the soffice
>> executable, anything, a bad guy has to do, is to deliver a oxt file with
>> the content type "application/vnd.oasis.opendocument.text".
> Addition to my first post: Seems to be no bug but a feature. In the past
> it pointed out that if it is made to easy to start potentially bad
> stuff, this usually caused security problems.
> As this (in my opinion too) simple way of installing addons is even
> documented here:
> I don't think that someone will change this.
> So can someone please just point me to the setting to disable addon
> installation at all?
> LibreOffice mailing list
> LibreOffice at lists.freedesktop.org
Founder, Steering Commitee Member - The Document Foundation
Voicing the enterprise needs
LibreOffice translation leader for Brazilian Portuguese
More information about the LibreOffice