Bug 433142 - Improvement for installer component needed
Summary: Improvement for installer component needed
Status: RESOLVED UNMAINTAINED
Alias: None
Product: kdeconnect
Classification: Applications
Component: common (other bugs)
Version First Reported In: 1.4
Platform: Microsoft Windows Microsoft Windows
: NOR normal
Target Milestone: ---
Assignee: Albert Vaca Cintora
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2021-02-18 08:21 UTC by Alexander Nolting
Modified: 2023-03-09 15:39 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed/Implemented In:
Sentry Crash Report:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Nolting 2021-02-18 08:21:11 UTC
The UWP Installer (sideload.appx) should be improved to avoid leaving firewall rules within replaced windows installations.
As the installer itself doesn't setup firewall rules, windows will as it detects  properly UWP apps requireing network access. Windows itself asks the user to setup a firewall rule for this application.
This causes for users which often updates the kdeconnect application constantly 4 no more used firewall rules.
Along with the design of Windows Firewall which offer the possibility to identify an application simply by its name and installation path for a certain firewall rule, this can cause issues.
Leaving this firewall rules would leave possibly a security hole were as evil individuums can try to prepare their own kdeconnect app from the souces along with maliscious code and try bring a user to download and install this app along with the same file name would allow the individuum to hide required internet access as windows doesn't ask anymore for setting up rules.


STEPS TO REPRODUCE
1. Install latest version.
2. Open Windows Firewall control
3. check set up rules for kdeconnect

OBSERVED RESULT
the former installation left a firewall rule identified by the name of the appliaction and the installation path


EXPECTED RESULT
the UWP installer deleted old unused firewall rules

SOFTWARE/OS VERSIONS
Windows: 10
macOS: 
Linux/KDE Plasma: 
(available in About System)
KDE Plasma Version: 
KDE Frameworks Version: 
Qt Version: 

ADDITIONAL INFORMATION
Comment 1 Alexander Nolting 2023-03-09 15:39:38 UTC
closed bug due to to feedback from development.