removed --ls, --get, --put

9 files changed, 16 insertions, 581 deletions

diff --git a/configure b/configure
index b15f649df..089615384 100755
--- a/configure
+++ b/configure
@@ -630,7 +630,6 @@ BUSYBOX_WORKAROUND
 HAVE_FATAL_WARNINGS
 HAVE_SUID
 HAVE_WHITELIST
-HAVE_FILE_TRANSFER
 HAVE_USERNS
 HAVE_NETWORK
 HAVE_GLOBALCFG
@@ -701,7 +700,6 @@ enable_bind
 enable_globalcfg
 enable_network
 enable_userns
-enable_file_transfer
 enable_whitelist
 enable_suid
 enable_fatal_warnings
@@ -1344,7 +1342,6 @@ Optional Features:
                           present, continue the program using defaults
   --disable-network       disable network
   --disable-userns        disable user namespace
-  --disable-file-transfer disable file transfer
   --disable-whitelist     disable whitelist
   --disable-suid          install as a non-SUID executable
   --enable-fatal-warnings -W -Wall -Werror
@@ -3627,19 +3624,6 @@ if test "x$enable_userns" != "xno"; then :
 
 fi
 
-HAVE_FILE_TRANSFER=""
-# Check whether --enable-file-transfer was given.
-if test "${enable_file_transfer+set}" = set; then :
-  enableval=$enable_file_transfer;
-fi
-
-if test "x$enable_file_transfer" != "xno"; then :
-
-        HAVE_FILE_TRANSFER="-DHAVE_FILE_TRANSFER"
-
-
-fi
-
 HAVE_WHITELIST=""
 # Check whether --enable-whitelist was given.
 if test "${enable_whitelist+set}" = set; then :
@@ -4961,7 +4945,6 @@ echo "   bind: $HAVE_BIND"
 echo "   network: $HAVE_NETWORK"
 echo "   user namespace: $HAVE_USERNS"
 echo "   whitelisting: $HAVE_WHITELIST"
-echo "   file transfer support: $HAVE_FILE_TRANSFER"
 echo "   busybox workaround: $BUSYBOX_WORKAROUND"
 echo "   Spectre compiler patch: $HAVE_SPECTRE"
 echo "   EXTRA_LDFLAGS: $EXTRA_LDFLAGS"
diff --git a/configure.ac b/configure.ac
index 0cd5c7dd0..a6bc44318 100644
--- a/configure.ac
+++ b/configure.ac
@@ -95,14 +95,6 @@ AS_IF([test "x$enable_userns" != "xno"], [
         AC_SUBST(HAVE_USERNS)
 ])
 
-HAVE_FILE_TRANSFER=""
-AC_ARG_ENABLE([file-transfer],
-    AS_HELP_STRING([--disable-file-transfer], [disable file transfer]))
-AS_IF([test "x$enable_file_transfer" != "xno"], [
-        HAVE_FILE_TRANSFER="-DHAVE_FILE_TRANSFER"
-        AC_SUBST(HAVE_FILE_TRANSFER)
-])
-
 HAVE_WHITELIST=""
 AC_ARG_ENABLE([whitelist],
     AS_HELP_STRING([--disable-whitelist], [disable whitelist]))
@@ -173,7 +165,6 @@ echo "   bind: $HAVE_BIND"
 echo "   network: $HAVE_NETWORK"
 echo "   user namespace: $HAVE_USERNS"
 echo "   whitelisting: $HAVE_WHITELIST"
-echo "   file transfer support: $HAVE_FILE_TRANSFER"
 echo "   busybox workaround: $BUSYBOX_WORKAROUND"
 echo "   Spectre compiler patch: $HAVE_SPECTRE"
 echo "   EXTRA_LDFLAGS: $EXTRA_LDFLAGS"
diff --git a/src/common.mk.in b/src/common.mk.in
index 7440b7b45..64fe2b85a 100644
--- a/src/common.mk.in
+++ b/src/common.mk.in
@@ -14,7 +14,6 @@ HAVE_BIND=@HAVE_BIND@
 HAVE_FATAL_WARNINGS=@HAVE_FATAL_WARNINGS@
 HAVE_NETWORK=@HAVE_NETWORK@
 HAVE_USERNS=@HAVE_USERNS@
-HAVE_FILE_TRANSFER=@HAVE_FILE_TRANSFER@
 HAVE_WHITELIST=@HAVE_WHITELIST@
 HAVE_GLOBALCFG=@HAVE_GLOBALCFG@
 HAVE_APPARMOR=@HAVE_APPARMOR@
@@ -25,7 +24,7 @@ C_FILE_LIST       = $(sort $(wildcard *.c))
 OBJS = $(C_FILE_LIST:.c=.o)
 BINOBJS =  $(foreach file, $(OBJS), $file)
 
-CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"'  $(HAVE_GCOV) -DPREFIX='"$(prefix)"'  -DSYSCONFDIR='"$(sysconfdir)/firejail"' -DLIBDIR='"$(libdir)"' $(HAVE_APPARMOR) $(HAVE_SECCOMP) $(HAVE_GLOBALCFG) $(HAVE_SECCOMP_H) $(HAVE_NETWORK) $(HAVE_USERNS) $(HAVE_BIND) $(HAVE_FILE_TRANSFER) $(HAVE_WHITELIST) -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security
+CFLAGS += -ggdb $(HAVE_FATAL_WARNINGS) -O2 -DVERSION='"$(VERSION)"'  $(HAVE_GCOV) -DPREFIX='"$(prefix)"'  -DSYSCONFDIR='"$(sysconfdir)/firejail"' -DLIBDIR='"$(libdir)"' $(HAVE_APPARMOR) $(HAVE_SECCOMP) $(HAVE_GLOBALCFG) $(HAVE_SECCOMP_H) $(HAVE_NETWORK) $(HAVE_USERNS) $(HAVE_BIND) $(HAVE_WHITELIST) -fstack-protector-all -D_FORTIFY_SOURCE=2 -fPIE -pie -Wformat -Wformat-security
 LDFLAGS += -pie -Wl,-z,relro -Wl,-z,now -lpthread
 EXTRA_LDFLAGS +=@EXTRA_LDFLAGS@
 EXTRA_CFLAGS +=@EXTRA_CFLAGS@
diff --git a/src/firejail/checkcfg.c b/src/firejail/checkcfg.c
index 7483136f4..0cceea17b 100644
--- a/src/firejail/checkcfg.c
+++ b/src/firejail/checkcfg.c
@@ -76,6 +76,7 @@ int checkcfg(int val) {
                         if (!ptr)
                                 continue;
 
+#ifndef LTS
                         // file transfer
                         else if (strncmp(ptr, "file-transfer ", 14) == 0) {
                                 if (strcmp(ptr + 14, "yes") == 0)
@@ -85,6 +86,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#endif
                         // dbus
                         else if (strncmp(ptr, "dbus ", 5) == 0) {
                                 if (strcmp(ptr + 5, "yes") == 0)
@@ -103,6 +105,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#ifndef LTS
                         // x11
                         else if (strncmp(ptr, "x11 ", 4) == 0) {
                                 if (strcmp(ptr + 4, "yes") == 0)
@@ -112,6 +115,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#endif
                         // apparmor
                         else if (strncmp(ptr, "apparmor ", 9) == 0) {
                                 if (strcmp(ptr + 9, "yes") == 0)
@@ -139,6 +143,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#ifndef LTS
                         // chroot
                         else if (strncmp(ptr, "chroot ", 7) == 0) {
                                 if (strcmp(ptr + 7, "yes") == 0)
@@ -148,6 +153,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#endif
                         // prompt
                         else if (strncmp(ptr, "firejail-prompt ", 16) == 0) {
                                 if (strcmp(ptr + 16, "yes") == 0)
@@ -236,6 +242,7 @@ int checkcfg(int val) {
                                         printf("netfilter default file %s\n", fname);
                         }
 
+#ifndef LTS
                         // Xephyr screen size
                         else if (strncmp(ptr, "xephyr-screen ", 14) == 0) {
                                 // expecting two numbers and an x between them
@@ -297,7 +304,7 @@ int checkcfg(int val) {
                                 if (!xvfb_extra_params)
                                         errExit("strdup");
                         }
-
+#endif
                         // quiet by default
                         else if (strncmp(ptr, "quiet-by-default ", 17) == 0) {
                                 if (strcmp(ptr + 17, "yes") == 0)
@@ -307,6 +314,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#ifndef LTS
                         else if (strncmp(ptr, "overlayfs ", 10) == 0) {
                                 if (strcmp(ptr + 10, "yes") == 0)
                                         cfg_val[CFG_OVERLAYFS] = 1;
@@ -339,6 +347,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#endif
                         else if (strncmp(ptr, "disable-mnt ", 12) == 0) {
                                 if (strcmp(ptr + 12, "yes") == 0)
                                         cfg_val[CFG_DISABLE_MNT] = 1;
@@ -354,6 +363,7 @@ int checkcfg(int val) {
                                         goto errout;
                                 cfg_val[CFG_ARP_PROBES] = arp_probes;
                         }
+#ifndef LTS
                         // xpra-attach
                         else if (strncmp(ptr, "xpra-attach ", 12) == 0) {
                                 if (strcmp(ptr + 12, "yes") == 0)
@@ -363,6 +373,7 @@ int checkcfg(int val) {
                                 else
                                         goto errout;
                         }
+#endif
                         else
                                 goto errout;
 
diff --git a/src/firejail/ls.c b/src/firejail/ls.c
deleted file mode 100644
index 601cab4f8..000000000
--- a/src/firejail/ls.c
+++ /dev/null
@@ -1,479 +0,0 @@
-/*
- * Copyright (C) 2014-2018 Firejail Authors
- *
- * This file is part of firejail project
- *
- * This program is free software; you can redistribute it and/or modify
- * it under the terms of the GNU General Public License as published by
- * the Free Software Foundation; either version 2 of the License, or
- * (at your option) any later version.
- *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU General Public License for more details.
- *
- * You should have received a copy of the GNU General Public License along
- * with this program; if not, write to the Free Software Foundation, Inc.,
- * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
-*/
-
-#include "firejail.h"
-#include <sys/types.h>
-#include <sys/stat.h>
-#include <sys/wait.h>
-#include <unistd.h>
-#include <dirent.h>
-#include <pwd.h>
-#include <grp.h>
-//#include <dirent.h>
-//#include <stdio.h>
-//#include <stdlib.h>
-
-// uid/gid cache
-static uid_t c_uid = 0;
-static char *c_uid_name = NULL;
-
-static void print_file_or_dir(const char *path, const char *fname, int separator) {
-        assert(fname);
-
-        char *name;
-        if (separator) {
-                if (asprintf(&name, "%s/%s", path, fname) == -1)
-                        errExit("asprintf");
-        }
-        else {
-                if (asprintf(&name, "%s%s", path, fname) == -1)
-                        errExit("asprintf");
-        }
-
-        struct stat s;
-        if (stat(name, &s) == -1) {
-                if (lstat(name, &s) == -1) {
-                        printf("Error: cannot access %s\n", name);
-                        return;
-                }
-        }
-
-        // permissions
-        if (S_ISLNK(s.st_mode))
-                printf("l");
-        else if (S_ISDIR(s.st_mode))
-                printf("d");
-        else if (S_ISCHR(s.st_mode))
-                printf("c");
-        else if (S_ISBLK(s.st_mode))
-                printf("b");
-        else if (S_ISSOCK(s.st_mode))
-                printf("s");
-        else
-                printf("-");
-        printf( (s.st_mode & S_IRUSR) ? "r" : "-");
-        printf( (s.st_mode & S_IWUSR) ? "w" : "-");
-        printf( (s.st_mode & S_IXUSR) ? "x" : "-");
-        printf( (s.st_mode & S_IRGRP) ? "r" : "-");
-        printf( (s.st_mode & S_IWGRP) ? "w" : "-");
-        printf( (s.st_mode & S_IXGRP) ? "x" : "-");
-        printf( (s.st_mode & S_IROTH) ? "r" : "-");
-        printf( (s.st_mode & S_IWOTH) ? "w" : "-");
-        printf( (s.st_mode & S_IXOTH) ? "x" : "-");
-        printf(" ");
-
-        // user name
-        char *username;
-        int allocated = 0;
-        if (s.st_uid == 0)
-                username = "root";
-        else if (s.st_uid == c_uid) {
-                assert(c_uid_name);
-                username = c_uid_name;
-        }
-        else {
-                struct passwd *pw = getpwuid(s.st_uid);
-                allocated = 1;
-                if (!pw) {
-                        if (asprintf(&username, "%d", s.st_uid) == -1)
-                                errExit("asprintf");
-                }
-                else {
-                        username = strdup(pw->pw_name);
-                        if (!username)
-                                errExit("asprintf");
-                }
-
-                if (c_uid == 0) {
-                        c_uid = s.st_uid;
-                        c_uid_name = strdup(username);
-                        if (!c_uid_name)
-                                errExit("asprintf");
-                }
-        }
-
-        // print user name, 8 chars maximum
-        int len = strlen(username);
-        if (len > 8) {
-                username[8] = '\0';
-                len = 8;
-        }
-        printf("%s ", username);
-        int i;
-        for (i = len; i < 8; i++)
-                printf(" ");
-        if (allocated)
-                free(username);
-
-
-        // group name
-        char *groupname;
-        allocated = 0;
-        if (s.st_uid == 0)
-                groupname = "root";
-        else {
-                struct group *g = getgrgid(s.st_gid);
-                allocated = 1;
-                if (!g) {
-                        if (asprintf(&groupname, "%d", s.st_gid) == -1)
-                                errExit("asprintf");
-                }
-                else {
-                        groupname = strdup(g->gr_name);
-                        if (!groupname)
-                                errExit("asprintf");
-                }
-        }
-
-        // print grup name, 8 chars maximum
-        len = strlen(groupname);
-        if (len > 8) {
-                groupname[8] = '\0';
-                len = 8;
-        }
-        printf("%s ", groupname);
-        for (i = len; i < 8; i++)
-                printf(" ");
-        if (allocated)
-                free(groupname);
-
-        char *sz;
-        if (asprintf(&sz, "%d", (int) s.st_size) == -1)
-                errExit("asprintf");
-        printf("%11.10s %s\n", sz, fname);
-        free(sz);
-
-}
-
-static void print_directory(const char *path) {
-        assert(path);
-        struct stat s;
-        if (stat(path, &s) == -1)
-                return;
-        assert(S_ISDIR(s.st_mode));
-
-        struct dirent **namelist;
-        int i;
-        int n;
-
-        n = scandir(path, &namelist, 0, alphasort);
-        if (n < 0)
-                        errExit("scandir");
-        else {
-                for (i = 0; i < n; i++) {
-                        print_file_or_dir(path, namelist[i]->d_name, 0);
-                        free(namelist[i]);
-                }
-        }
-        free(namelist);
-}
-
-char *expand_path(const char *path) {
-        char *fname = NULL;
-        if (*path == '/') {
-                fname = strdup(path);
-                if (!fname)
-                        errExit("strdup");
-        }
-        else if (*path == '~') {
-                if (asprintf(&fname, "%s%s", cfg.homedir, path + 1) == -1)
-                        errExit("asprintf");
-        }
-        else {
-                // assume the file is in current working directory
-                if (!cfg.cwd) {
-                        fprintf(stderr, "Error: current working directory has been deleted\n");
-                        exit(1);
-                }
-                if (asprintf(&fname, "%s/%s", cfg.cwd, path) == -1)
-                        errExit("asprintf");
-        }
-        return fname;
-}
-
-void sandboxfs(int op, pid_t pid, const char *path1, const char *path2) {
-        EUID_ASSERT();
-        assert(path1);
-
-        // if the pid is that of a firejail  process, use the pid of the first child process
-        EUID_ROOT();
-        char *comm = pid_proc_comm(pid);
-        EUID_USER();
-        if (comm) {
-                if (strcmp(comm, "firejail") == 0) {
-                        pid_t child;
-                        if (find_child(pid, &child) == 0) {
-                                pid = child;
-                        }
-                }
-                free(comm);
-        }
-
-        // check privileges for non-root users
-        uid_t uid = getuid();
-        if (uid != 0) {
-                uid_t sandbox_uid = pid_get_uid(pid);
-                if (uid != sandbox_uid) {
-                        fprintf(stderr, "Error: permission denied.\n");
-                        exit(1);
-                }
-        }
-
-        // expand paths
-        char *fname1 = expand_path(path1);;
-        char *fname2 = NULL;
-        if (path2 != NULL) {
-                fname2 = expand_path(path2);
-        }
-        if (arg_debug) {
-                printf("file1 %s\n", fname1);
-                printf("file2 %s\n", fname2);
-        }
-
-        // sandbox root directory
-        char *rootdir;
-        if (asprintf(&rootdir, "/proc/%d/root", pid) == -1)
-                errExit("asprintf");
-
-        if (op == SANDBOX_FS_LS) {
-                EUID_ROOT();
-                // chroot
-                if (chroot(rootdir) < 0)
-                        errExit("chroot");
-                if (chdir("/") < 0)
-                        errExit("chdir");
-
-                // drop privileges
-                drop_privs(0);
-
-                // check access
-                if (access(fname1, R_OK) == -1) {
-                        fprintf(stderr, "Error: Cannot access %s\n", fname1);
-                        exit(1);
-                }
-                /* coverity[toctou] */
-                char *rp = realpath(fname1, NULL);
-                if (!rp) {
-                        fprintf(stderr, "Error: Cannot access %s\n", fname1);
-                        exit(1);
-                }
-                if (arg_debug)
-                        printf("realpath %s\n", rp);
-
-
-                // list directory contents
-                struct stat s;
-                if (stat(rp, &s) == -1) {
-                        fprintf(stderr, "Error: Cannot access %s\n", rp);
-                        exit(1);
-                }
-                if (S_ISDIR(s.st_mode)) {
-                        char *dir;
-                        if (asprintf(&dir, "%s/", rp) == -1)
-                                errExit("asprintf");
-
-                        print_directory(dir);
-                        free(dir);
-                }
-                else {
-                        char *split = strrchr(rp, '/');
-                        if (split) {
-                                *split = '\0';
-                                char *rp2 = split + 1;
-                                if (arg_debug)
-                                        printf("path %s, file %s\n", rp, rp2);
-                                print_file_or_dir(rp, rp2, 1);
-                        }
-                }
-                free(rp);
-        }
-
-        // get file from sandbox and store it in the current directory
-        else if (op == SANDBOX_FS_GET) {
-                char *src_fname =fname1;
-                char *dest_fname = strrchr(fname1, '/');
-                if (!dest_fname || *(++dest_fname) == '\0') {
-                        fprintf(stderr, "Error: invalid file name %s\n", fname1);
-                        exit(1);
-                }
-
-                EUID_ROOT();
-                if (arg_debug)
-                        printf("copy %s to %s\n", src_fname, dest_fname);
-
-                // create a user-owned temporary file in /run/firejail directory
-                char tmp_fname[] = "/run/firejail/tmpget-XXXXXX";
-                int fd = mkstemp(tmp_fname);
-                if (fd != -1) {
-                        SET_PERMS_FD(fd, getuid(), getgid(), 0600);
-                        close(fd);
-                }
-
-                // copy the source file into the temporary file - we need to chroot
-                pid_t child = fork();
-                if (child < 0)
-                        errExit("fork");
-                if (child == 0) {
-                        // chroot
-                        if (chroot(rootdir) < 0)
-                                errExit("chroot");
-                        if (chdir("/") < 0)
-                                errExit("chdir");
-
-                        // drop privileges
-                        drop_privs(0);
-
-                        // copy the file
-                        if (copy_file(src_fname, tmp_fname, getuid(), getgid(), 0600)) // already a regular user
-                                _exit(1);
-#ifdef HAVE_GCOV
-                        __gcov_flush();
-#endif
-                        _exit(0);
-                }
-
-                // wait for the child to finish
-                int status = 0;
-                waitpid(child, &status, 0);
-                if (WIFEXITED(status) && WEXITSTATUS(status) == 0);
-                else {
-                        unlink(tmp_fname);
-                        exit(1);
-                }
-
-                // copy the temporary file into the destionation file
-                child = fork();
-                if (child < 0)
-                        errExit("fork");
-                if (child == 0) {
-                        // drop privileges
-                        drop_privs(0);
-
-                        // copy the file
-                        if (copy_file(tmp_fname, dest_fname, getuid(), getgid(), 0600)) // already a regular user
-                                _exit(1);
-#ifdef HAVE_GCOV
-                        __gcov_flush();
-#endif
-                        _exit(0);
-                }
-
-                // wait for the child to finish
-                status = 0;
-                waitpid(child, &status, 0);
-                if (WIFEXITED(status) && WEXITSTATUS(status) == 0);
-                else {
-                        unlink(tmp_fname);
-                        exit(1);
-                }
-
-                // remove the temporary file
-                unlink(tmp_fname);
-                EUID_USER();
-        }
-        // get file from host and store it in the sandbox
-        else if (op == SANDBOX_FS_PUT && path2) {
-                char *src_fname =fname1;
-                char *dest_fname = fname2;
-
-                EUID_ROOT();
-                if (arg_debug)
-                        printf("copy %s to %s\n", src_fname, dest_fname);
-
-                // create a user-owned temporary file in /run/firejail directory
-                char tmp_fname[] = "/run/firejail/tmpget-XXXXXX";
-                int fd = mkstemp(tmp_fname);
-                if (fd == -1) {
-                        fprintf(stderr, "Error: cannot create temporary file %s\n", tmp_fname);
-                        exit(1);
-                }
-                SET_PERMS_FD(fd, getuid(), getgid(), 0600);
-                close(fd);
-
-                // copy the source file into the temporary file - we need to chroot
-                pid_t child = fork();
-                if (child < 0)
-                        errExit("fork");
-                if (child == 0) {
-                        // drop privileges
-                        drop_privs(0);
-
-                        // copy the file
-                        if (copy_file(src_fname, tmp_fname, getuid(), getgid(), 0600)) // already a regular user
-                                _exit(1);
-#ifdef HAVE_GCOV
-                        __gcov_flush();
-#endif
-                        _exit(0);
-                }
-
-                // wait for the child to finish
-                int status = 0;
-                waitpid(child, &status, 0);
-                if (WIFEXITED(status) && WEXITSTATUS(status) == 0);
-                else {
-                        unlink(tmp_fname);
-                        exit(1);
-                }
-
-                // copy the temporary file into the destionation file
-                child = fork();
-                if (child < 0)
-                        errExit("fork");
-                if (child == 0) {
-                        // chroot
-                        if (chroot(rootdir) < 0)
-                                errExit("chroot");
-                        if (chdir("/") < 0)
-                                errExit("chdir");
-
-                        // drop privileges
-                        drop_privs(0);
-
-                        // copy the file
-                        if (copy_file(tmp_fname, dest_fname, getuid(), getgid(), 0600)) // already a regular user
-                                _exit(1);
-#ifdef HAVE_GCOV
-                        __gcov_flush();
-#endif
-                        _exit(0);
-                }
-
-                // wait for the child to finish
-                status = 0;
-                waitpid(child, &status, 0);
-                if (WIFEXITED(status) && WEXITSTATUS(status) == 0);
-                else {
-                        unlink(tmp_fname);
-                        exit(1);
-                }
-
-                // remove the temporary file
-                unlink(tmp_fname);
-                EUID_USER();
-        }
-
-        if (fname2)
-                free(fname2);
-        free(fname1);
-        free(rootdir);
-
-        exit(0);
-}
diff --git a/src/firejail/main.c b/src/firejail/main.c
index 9b406b4b9..4212edd9b 100644
--- a/src/firejail/main.c
+++ b/src/firejail/main.c
@@ -598,6 +598,7 @@ static void run_cmd_and_exit(int i, int argc, char **argv) {
                         exit_err_feature("networking");
         }
 #endif
+#ifndef LTS
 #ifdef HAVE_FILE_TRANSFER
         else if (strncmp(argv[i], "--get=", 6) == 0) {
                 if (checkcfg(CFG_FILE_TRANSFER)) {
@@ -678,6 +679,7 @@ static void run_cmd_and_exit(int i, int argc, char **argv) {
                         exit_err_feature("file transfer");
         }
 #endif
+#endif
         else if (strncmp(argv[i], "--join=", 7) == 0) {
                 if (checkcfg(CFG_JOIN) || getuid() == 0) {
                         logargs(argc, argv);
diff --git a/status b/status
index d423a9326..44f9318f8 100644
--- a/status
+++ b/status
@@ -1,7 +1,7 @@
 Phase 2
 - Aug 21
 - remove --output --libtrace --libtracelog
-
+- remove --ls, --get, --put
 
 Phase 1
 - starting from main as of Jul 27
diff --git a/test/utils/ls.exp b/test/utils/ls.exp
deleted file mode 100755
index ff6867c51..000000000
--- a/test/utils/ls.exp
+++ /dev/null
@@ -1,69 +0,0 @@
-#!/usr/bin/expect -f
-
-set timeout 10
-spawn $env(SHELL)
-match_max 100000
-set firstspawn $spawn_id
-
-
-send -- "rm -f lstesting\r"
-sleep 1
-send -- "firejail --private --name=test\r"
-expect {
-        timeout {puts "TESTING ERROR 0\n";exit}
-        "Child process initialized"
-}
-sleep 1
-send -- "echo my_testing > ~/lstesting\r"
-after 100
-
-# ls
-spawn $env(SHELL)
-send -- "firejail --ls=test ~/.\r"
-expect {
-        timeout {puts "TESTING ERROR 1\n";exit}
-        "lstesting"
-}
-sleep 1
-
-# get
-send -- "firejail --get=test ~/lstesting\r"
-sleep 1
-send -- "cat lstesting\r"
-expect {
-        timeout {puts "TESTING ERROR 2n";exit}
-        "my_testing"
-}
-after 100
-
-# put
-send -- "echo put_test > ~/lstesting\r"
-after 100
-send -- "firejail --put=test ~/lstesting ~/lstesting_2\r"
-sleep 1
-
-set spawn_id $firstspawn
-send -- "ls -al ~\r"
-expect {
-        timeout {puts "TESTING ERROR 3\n";exit}
-        "lstesting_2"
-}
-
-after 100
-send -- "cat ~/lstesting_2\r"
-expect {
-        timeout {puts "TESTING ERROR 4\n";exit}
-        "put_test"
-}
-after 100
-send -- "exit\r"
-sleep 1
-
-
-
-
-
-send -- "rm -f lstesting\r"
-
-after 100
-puts "\nall done\n"
diff --git a/test/utils/utils.sh b/test/utils/utils.sh
index f12698f0a..c4958094e 100755
--- a/test/utils/utils.sh
+++ b/test/utils/utils.sh
@@ -95,9 +95,6 @@ echo "TESTING: join profile (test/utils/join-profile.exp)"
 echo "TESTING: top (test/utils/top.exp)"
 ./top.exp
 
-echo "TESTING: file transfer (test/utils/ls.exp)"
-./ls.exp
-
 echo "TESTING: firemon seccomp (test/utils/firemon-seccomp.exp)"
 ./firemon-seccomp.exp