diff options
author | Mike Kaganski <mike.kaganski@collabora.com> | 2023-11-09 16:12:45 +0300 |
---|---|---|
committer | Mike Kaganski <mike.kaganski@collabora.com> | 2023-12-07 15:13:20 +0300 |
commit | cba0fc949d8d3c609d4ce99453fcd75f11d0861b (patch) | |
tree | 5eafe7b0614939a56df715159a9c57f47452900c /scripting/Package_scriptproviderforpython.mk | |
parent | d6d45c5d0dad86e3d024d7a187774e3bc4af0c53 (diff) |
Fix USE_CONFIG_APPROVE_CONFIRMATION and USE_CONFIG_REJECT_CONFIRMATION
mimo-7.5.9.2.M1
They still showed UI in case of signed macros.
Two decisions were made, to improve security of USE_CONFIG_APPROVE_CONFIRMATION:
1. In case of High macro security mode, valid but untrusted certificate will be
automatically rejected (because it is not safe to automatically add trusted
certificates) - so in this mode, USE_CONFIG_APPROVE_CONFIRMATION is the same
as USE_CONFIG_REJECT_CONFIRMATION;
2. In case of Medium macro security mode, valid but untrusted certificate will
not automatically allow macros execution, but will proceed to the following
checks - which on Windows will try to check the source's Security Zone, and
may disallow macros based on that. Only after Security Zone check the macros
will be automatically allowed.
Change-Id: I1a9c92c6b940b689599c5d106798ecfc691dad46
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/159214
Tested-by: Jenkins
Reviewed-by: Mike Kaganski <mike.kaganski@collabora.com>
Reviewed-on: https://gerrit.libreoffice.org/c/core/+/159278
Reviewed-by: Miklos Vajna <vmiklos@collabora.com>
Diffstat (limited to 'scripting/Package_scriptproviderforpython.mk')
0 files changed, 0 insertions, 0 deletions