LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 07-10-2005, 09:41 AM   #1
little_penguin
Member
 
Registered: Nov 2004
Location: Scotland
Distribution: Suse 10 - Running KDE
Posts: 314

Rep: Reputation: 30
Can disable file transfer in Gaim for Security?


Anyone know how to do this?
There seems to be no function that allows you to do this prefernces, I mean its good to have the option of this function, but it also good to be able to turn it off.
For myself I have never used it as I feel it is a potential security risk.
It seems shortsighted that there is no easy way to disable this feature.
 
Old 07-10-2005, 11:49 AM   #2
dr_zayus69
Member
 
Registered: Sep 2004
Location: western massachusetts
Distribution: fedora core 3, Suse 10
Posts: 877

Rep: Reputation: 35
a lot of people have had problems transfering files with gaim - said if anyone tried to transfer you malacious code they'd probably just get fed up and give up. i myself have only done one successful transfer with the countless amount of times i have tried. the only thing i can think of tho is to find out where the files get transfered and change the permissions to that folder so no one has write permissions to it. if it is somewhere where that is inconvient like your home then find out how to change where it gets changed to and make a dummy directory for it and change it so that directory doesn't give anyone write permissions.
 
Old 07-10-2005, 11:53 AM   #3
little_penguin
Member
 
Registered: Nov 2004
Location: Scotland
Distribution: Suse 10 - Running KDE
Posts: 314

Original Poster
Rep: Reputation: 30
Quote:
Originally posted by dr_zayus69
a lot of people have had problems transfering files with gaim - said if anyone tried to transfer you malacious code they'd probably just get fed up and give up. i myself have only done one successful transfer with the countless amount of times i have tried. the only thing i can think of tho is to find out where the files get transfered and change the permissions to that folder so no one has write permissions to it. if it is somewhere where that is inconvient like your home then find out how to change where it gets changed to and make a dummy directory for it and change it so that directory doesn't give anyone write permissions.

That is a good idea, although it doesnt allow to you set which folder file transfers will go into either, I dont think kopete does either
That would be a good feature to be able to do also, you know of any way I get sujest they include these features in either? I think it would make them better programs.
 
Old 07-10-2005, 12:12 PM   #4
dr_zayus69
Member
 
Registered: Sep 2004
Location: western massachusetts
Distribution: fedora core 3, Suse 10
Posts: 877

Rep: Reputation: 35
does it say what port the transfers go through? hopefully not the same as the protocol cuz then you could close the port that the transfer uses. It's good your thinking security wise but the likely hood that someone is going to have enough patience to get thru to send a file of malacious code they will still need to find out your root password to run it and have it do damage they more then likely will move on to a windows box cuz it would be easier for them. a theft steals an old lady's purse cuz she is an easy target, they don't go and try to take a wallet from a 300 pount muscle man. good luck.
 
Old 07-23-2005, 01:23 PM   #5
gljubuncic
Member
 
Registered: Apr 2005
Posts: 34

Rep: Reputation: 15
Taken from here: http://sourceforge.net/mailarchive/f...ewmonth=200502


To disable file transfer you must compile GAIM as described in the official
site with two minor changes in ft.c and gtkft.c.
The files reside in src/.

In ft.c remove the following lines around line 328:

--------------------------------------------------------------------------------
---------------
if (gaim_xfer_get_type(xfer) == GAIM_XFER_RECEIVE) {
if (gaim_xfer_get_filename(xfer) ||
gaim_xfer_get_status(xfer) == GAIM_XFER_STATUS_ACCEPTED)
gaim_xfer_ask_recv(xfer);
else
gaim_xfer_ask_accept(xfer);
} else
gaim_xfer_choose_file(xfer);
--------------------------------------------------------------------------------
-----------

In gtkft.c remove the following lines around line 794:

____________________________________________
if (dialog == NULL) {
dialog = gaim_gtkxfer_dialog_new();

gaim_set_gtkxfer_dialog(dialog);
}

gaim_gtkxfer_dialog_show(dialog);
____________________________________________

Its a silly solution but It worked for me. The Icon of File Transfer is still
visible but cliking on it result in nothing. Also if another IM client tries
to send a file to this Hacked GAIM, nothing apears in the GAIM windows.

I am not a programmer just a curios guy, so maybe sombody have another mor decent
solution to the problem.

It will be great if in the next release of GAIM, we have an option in "configure"
to disable File Transfer.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
gaim file transfer greythorne Slackware 1 06-05-2004 04:20 AM
How to enable file transfer of gaim faiyipken Linux - Networking 1 02-01-2004 12:39 AM
Gaim - File transfer Wynd Linux - Networking 0 12-10-2003 08:24 PM
GAIM / AIM file transfer? Ogledbyoldmen Linux - Software 3 10-07-2003 04:41 PM
gAIM File Transfer Qwik Linux - Software 0 06-22-2003 09:02 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 04:02 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration