Threat level - Revision history

Djphil: Indentation

2020-09-28T22:22:21Z

Indentation

Justincc: Actually - there is a nuisance level, it's just completely unused! Undo revision 30053 by Justincc (talk)

2012-07-05T20:07:49Z

Actually - there is a nuisance level, it's just completely unused! Undo revision 30053 by Justincc (talk)

Justincc: There is no nuisance access level!

2012-07-05T19:57:51Z

There is no nuisance access level!

Justincc at 19:57, 5 July 2012

2012-07-05T19:57:14Z

MakoBot: Robot: Cosmetic changes

2012-03-04T04:16:21Z

Robot: Cosmetic changes

Makopoppo at 07:24, 25 June 2011

2011-06-25T07:24:16Z

Fritigern at 20:57, 11 June 2011

2011-06-11T20:57:04Z

MakoBot: Removed 'Template:' prefix from template includings and/or changed external-link into internal-link

2011-06-10T23:44:39Z

Removed 'Template:' prefix from template includings and/or changed external-link into internal-link

Makopoppo at 09:49, 4 June 2011

2011-06-04T09:49:38Z

Kcozens: Forgot to capitalize "o" in "os" at start of function names

2011-05-06T03:45:10Z

Forgot to capitalize "o" in "os" at start of function names

@@ Line 98: / Line 98: @@
 // various OSSL functions.
 //
 integer WhichProbeFunction; // to tell us which function we're probing
 integer NumberOfFunctionsToCheck; // how many functions are we probing?
 list FunctionNames = [ "osTeleportAgent", "osGetAgentIP", "osGetAgents", "osAvatarPlayAnimation",
- "osAvatarStopAnimation", "osAvatarName2Key", "osKey2Name" ];
+list FunctionNames = [
 list FunctionPermitted = [ 0, 0, 0, 0, 0, 0, 0 ]; // 0 = not permitted, 1 = permitted
-// isFunctionAvailable() takes the name of a function, and returns 1 if it is available, and 0 if
+// isFunctionAvailable() takes the name of a function, and returns 1 if it is available,
-// it is forbidden or has not been tested.
+// and 0 if it is forbidden or has not been tested.
-//
 integer isFunctionAvailable( string whichFunction )
+{
- integer index = llListFindList( FunctionNames, whichFunction );
+    integer index = llListFindList( FunctionNames, whichFunction );
- if (index == -1) return 0; // Return FALSE if the function name wasn't one of the ones we checked.
+    if (index == -1) return 0; // Return FALSE if the function name wasn't one of the ones we checked.
- return llList2Integer( FunctionPermitted, index ); // return the appropriate availability flag.
+    return llList2Integer( FunctionPermitted, index ); // return the appropriate availability flag.
+}
@@ Line 119: / Line 129: @@
 // use this fact to check all of our desired functions in turn, and then pass control to the Running
 // state once we've checked them all.
-//
 default
+{
- state_entry()
+    state_entry()
-−
+    {
- llOwnerSay( "Probing OSSL functions to see what we can use" );
+        llOwnerSay( "Probing OSSL functions to see what we can use" );
- NumberOfFunctionsToCheck = llGetListLength( FunctionNames );
+        NumberOfFunctionsToCheck = llGetListLength( FunctionNames );
- WhichProbeFunction = -1;
+        WhichProbeFunction = -1;
- llSetTimerEvent( 0.25 ); // check only four functions a second, just to be nice.
+        llSetTimerEvent( 0.25 ); // check only four functions a second, just to be nice.
-−
+    }
-−
- timer()
+    timer()
-−
+    {
- string BogusKey = "12345678-1234-1234-1234-123456789abc"; // it doesn't need to be valid
+        string BogusKey = "12345678-1234-1234-1234-123456789abc"; // it doesn't need to be valid
- string s; // for storing the result of string functions
+        string s; // for storing the result of string functions
- list l; // for storing the result of list functions
+        list l; // for storing the result of list functions
- if (++WhichProbeFunction == NumberOfFunctionsToCheck) // Increment WhichProbeFunction; exit if we're done
+        if (++WhichProbeFunction == NumberOfFunctionsToCheck) // Increment WhichProbeFunction; exit if we're done
- llSetTimerEvent( 0.0 ); // stop the timer
- state Running; // switch to the Running state
+            llSetTimerEvent( 0.0 ); // stop the timer
+            state Running; // switch to the Running state
- llOwnerSay( "Checking function " + llList2String( FunctionNames, WhichProbeFunction )); // say status
- if (WhichProbeFunction == 0)
- osTeleportAgent( BogusKey, ZERO_VECTOR, ZERO_VECTOR );
+        llOwnerSay( "Checking function " + llList2String( FunctionNames, WhichProbeFunction )); // say status
- else if (WhichProbeFunction == 1)
+        if (WhichProbeFunction == 0)
- s = osGetAgentIP( BogusKey );
+            osTeleportAgent( BogusKey, ZERO_VECTOR, ZERO_VECTOR );
- else if (WhichProbeFunction == 2)
+        else if (WhichProbeFunction == 1)
- l = osGetAgents();
+            s = osGetAgentIP( BogusKey );
- else if (WhichProbeFunction == 3)
+        else if (WhichProbeFunction == 2)
- osAvatarPlayAnimation( BogusKey, BogusKey );
+            l = osGetAgents();
- else if (WhichProbeFunction == 4)
+        else if (WhichProbeFunction == 3)
- osAvatarStopAnimation( BogusKey, BogusKey );
+            osAvatarPlayAnimation( BogusKey, BogusKey );
- else if (WhichProbeFunction == 5)
+        else if (WhichProbeFunction == 4)
- s = osAvatarName2Key( "John", "Smith" );
+            osAvatarStopAnimation( BogusKey, BogusKey );
- else if (WhichProbeFunction == 6)
+        else if (WhichProbeFunction == 5)
- s = osKey2Name( BogusKey );
+            s = osAvatarName2Key( "John", "Smith" );
+        else if (WhichProbeFunction == 6)
- // If we got here, then the timer() handler didn't crash, which means the function it checked for
+            s = osKey2Name( BogusKey );
- // was actually permitted. So we update the list to indicate that we can use that particular function.
- FunctionPermitted = llListReplaceList( FunctionPermitted, [ 1 ], WhichProbeFunction, WhichProbeFunction );
+        // If we got here, then the timer() handler didn't crash, which means the function it checked for
+        // was actually permitted. So we update the list to indicate that we can use that particular function.
+}
-−
 state Running
+{
- state_entry()
+    state_entry()
-−
+    {
- string s = "Here are the functions we can use: ";
+        string s = "Here are the functions we can use: ";
- string t = "Here are the functions we cannot use: ";
+        string t = "Here are the functions we cannot use: ";
- integer i = llGetListLength( FunctionNames );
+        integer i = llGetListLength( FunctionNames );
- while (i--)
- if (llList2Integer( FunctionPermitted, i ))
+        while (i--)
- s += llList2String( FunctionNames, i ) + " ";
+            if (llList2Integer( FunctionPermitted, i ))
- else
+                s += llList2String( FunctionNames, i ) + " ";
- t += llList2String( FunctionNames, i ) + " ";
+            else
- llOwnerSay( s );
+                t += llList2String( FunctionNames, i ) + " ";
- llOwnerSay( t );
- if (isFunctionAvailable( "osKey2Name" ))
+        llOwnerSay( s );
+        llOwnerSay( t );
- key theUUID = "190482f8-b1bc-4c36-aa8d-cfb36c8fea61";
- llOwnerSay( "UUID " + (string) theUUID + " maps to the name " + osKey2Name( theUUID ) + "." );
+        if (isFunctionAvailable( "osKey2Name" ))
-−
+        {
- else
+            key theUUID = "190482f8-b1bc-4c36-aa8d-cfb36c8fea61";
+            llOwnerSay( "UUID " + (string) theUUID + " maps to the name " + osKey2Name( theUUID ) + "." );
- llOwnerSay( "osKey2Name() is unavailable; cannot map UUID to name." );
-−
+        else
+}
 </source>

@@ Line 8: / Line 8: @@
 :Functions with the threat level "''None''":
 :See [[:Category:OSSL_Functions/ThreatLevel:None]]
 ;VeryLow

@@ Line 8: / Line 8: @@
 :Functions with the threat level "''None''":
 :See [[:Category:OSSL_Functions/ThreatLevel:None]]
 ;VeryLow

@@ Line 46: / Line 46: @@
 The '''OSFunctionThreatLevel''' setting in the script engines' configuration sections of OpenSim.ini controls what classes of functions are accessible to scripts owned by any avatar; any function at the same threat level or lower than the value provided for '''OsFunctionThreatLevel''' is permitted to run. If '''OSFunctionThreatLevel''' is absent from the configuration file, the default value is '''VeryLow'''.
-OSSL functions may also be permitted or prohibited on an individual basis, by adding '''Allow_*''' lines to the script engine's configuration section. To permit scripts owned by anyone to access a function, even if its threat level exceeds the value of '''OSFunctionThreatLevel''', use the value 'true':
+We do not recommend that you set a general level above Low unless you have a very high level of trust in all the visitors to the simulator that have the ability to run scripts.
 <source lang="ini">
@@ Line 52: / Line 54: @@
 </source>
-To prohibit scripts owned by anyone from accessing a function, even if its threat level is equal to or below the value of '''OSFunctionThreatLevel''', use the value 'false':
+You can also prohibit individual OSSL functions, even if its threat level is equal to or below the value of '''OSFunctionThreatLevel''':
 <source lang="ini">
@@ Line 63: / Line 65: @@
 Allow_osMakeNotecard = a1cbbdd7-8adb-4158-aa52-c0ee882c4492
 Allow_osTeleportAgent = a1cbbdd7-8adb-4158-aa52-c0ee882c4492,9cab27da-764c-4469-a628-369d978ba436
 </source>

@@ Line 1: / Line 1: @@
 {{Quicklinks}}
-To permit region owners to enable the extended scripting functionality of [[OSSL]], without allowing malicious scripts to access potentially troublesome functions, each OSSL function is assigned a '''threat level''', and access to the functions is granted or denied based on a default threshold set in '''OpenSim.ini''' (which can be overridden for individual functions on a case-by-case basis). Review [[OSSL_Enabling_Functions]] page with a full example for Implementing the various osFunctions for your system.
+To permit region owners to enable the extended scripting functionality of [[OSSL]], without allowing malicious scripts to access potentially troublesome functions, each OSSL function is assigned a '''threat level''', and access to the functions is granted or denied based on a default threshold set in '''OpenSim.ini''' (which can be overridden for individual functions on a case-by-case basis). Review [[OSSL Enabling Functions]] page with a full example for Implementing the various osFunctions for your system.
 The threat levels, from wholly unthreatening to most potentially damaging, are:
@@ Line 67: / Line 67: @@
 Note that [[:Category:OSSL functions without threat level|wiki may not have the threat levels for some functions]] or have wrong threat levels. You can check actual threat levels by looking into OpenSim.Region.ScriptEngine.Shared.Api.OSSL_Api class in the source distribution or git master(see CheckThreatLevel() calling).
-<br>
+<br />
-== Ascertaining privilege to use a function  ==
+== Ascertaining privilege to use a function ==
 There is not currently a function which would allow a script to determine whether or not it has permission to use any specific OSSL function. Such a function was proposed, but rejected by a developer on the grounds that it could permit a griefer script too much knowledge of its environment (though, as shown below, this information is already available through other methods, albeit less efficient ones).

@@ Line 3: / Line 3: @@
 The threat levels, from wholly unthreatening to most potentially damaging, are:
 ;None
 :Function is no threat at all. It doesn't constitute a threat to either users or the system and has no known side effects.
 :Functions with the threat level "''None''":
-:[[OsDrawEllipse]], [[OsDrawFilledPolygon]], [[OsDrawFilledRectangle]], [[OsDrawImage]], [[OsDrawLine]], [[OsDrawRectangle]], [[OsDrawText]], [[OsGetAgents]], [[OsGetCurrentSunHour]], [[OsGetMapTexture]], [[OsList2Double]], [[OsMovePen]], [[OsParseJSON]], [[OsSetFontName]], [[OsSetFontSize]], [[OsSetPenColour]], [[OsSetPenSize]], [[OsSunSetParam]], [[OsTerrainGetHeight]], [[OsWindActiveModelPluginName]]
+:See [[:Category:OSSL_Functions/ThreatLevel:None]]
-−
 ;Nuisance
 :Abuse of this command can cause a nuisance to the region operator, such as log message spew.
 :Functions with the threat level "''Nuisance''":
-:[[OsSetEstateSunSettings]], [[OsSetRegionSunSettings]]
+:See [[:Category:OSSL_Functions/ThreatLevel:Nuisance]]
 ;VeryLow
 :Extreme levels of abuse of this function can cause impaired functioning of the region, or very gullible users can be tricked into experiencing harmless effects.
 :Functions with the threat level "''VeryLow''":
-:[[OsGetDrawStringSize]], [[OsSetDynamicTextureData]], [[OsSetDynamicTextureDataBlend]], [[OsSetDynamicTextureDataBlendFace]], [[OsSetDynamicTextureURL]], [[OsSetDynamicTextureURLBlend]], [[OsSetDynamicTextureURLBlendFace]], [[OsSetParcelMediaURL]], [[OsSetPrimFloatOnWater]], [[OsTerrainFlush]], [[OsWindParamGet]], [[OsWindParamSet]]
+:See [[:Category:OSSL_Functions/ThreatLevel:VeryLow]]
 ;Low
 :Intentional abuse can cause crashes or malfunction under certain circumstances, which can be easily rectified; or certain users can be tricked into certain situations in an avoidable manner.
 :Functions with the threat level "''Low''":
-:[[OsAvatarName2Key]], [[OsFormatString]], [[OsKey2Name]], [[OsLoadedCreationDate]], [[OsLoadedCreationID]], [[OsLoadedCreationTime]], [[OsMessageObject]]
+:See [[:Category:OSSL_Functions/ThreatLevel:Low]]
 ;Moderate
 :Intentional abuse can cause denial of service and crashes with potential of data or state loss; or trusting users can be tricked into embarrassing or uncomfortable situations.
 :Functions with the threat level "''Moderate''":
-:[[OsGetGridLoginURI]], [[OsGetGridName]], [[OsGetGridNick]], [[OsGetRegionStats]], [[OsGetSimulatorMemory]], [[OsSetSpeed]]
+:See [[:Category:OSSL_Functions/ThreatLevel:Moderate]]
 ;High
 :Casual abuse can cause impaired functionality or temporary denial of service conditions. Intentional abuse can easily cause crashes with potential data loss, or can be used to trick experienced and cautious users into unwanted situations, or changes global data permanently and without undo ability.
 :Functions with the threat level "''High''":
-:[[OsCauseDamage]], [[OsCauseHealing]], [[OsGetAgentIP]], [[OsGetLinkPrimitiveParams]], [[OsGetRegionMapTexture]], [[OsGetScriptEngineName]], [[OsGetSimulatorVersion]], [[OsMakeNotecard]], [[OsMatchString]], [[OsNpcCreate]], [[OsNpcMoveTo]], [[OsNpcRemove]], [[OsNpcSay]], [[OsRegionRestart]], [[OsSetRegionWaterHeight]], [[OsSetStateEvents]], [[OsTeleportAgent]], [[OsTerrainSetHeight]]
+:See [[:Category:OSSL_Functions/ThreatLevel:High]]
 ;VeryHigh
 :Even normal use may, depending on the number of instances, or frequency of use, result in severe service impairment or crash with loss of data, or can be used to cause unwanted or harmful effects on users without giving the user a means to avoid it.
 :Functions with the threat level "''VeryHigh''":
-:[[OsAvatarPlayAnimation]], [[OsAvatarStopAnimation]], [[OsGetNotecard]], [[OsGetNotecardLine]], [[OsGetNumberOfNotecardLines]], [[OsRegionNotice]], [[OsSetRot]]
+:See [[:Category:OSSL_Functions/ThreatLevel:VeryHigh]]
 ;Severe
 :Even casual use is a danger to region stability, or function allows console or OS command execution, or function allows taking money without consent, or allows deletion or modification of user data, or allows the compromise of sensitive data by design.
 :Functions with the threat level "''Severe''":
-:[[OsConsoleCommand]], [[OsKickAvatar]]
+:See [[:Category:OSSL_Functions/ThreatLevel:Severe]]
-−
 The '''OSFunctionThreatLevel''' setting in the script engines' configuration sections of OpenSim.ini controls what classes of functions are accessible to scripts owned by any avatar; any function at the same threat level or lower than the value provided for '''OsFunctionThreatLevel''' is permitted to run. If '''OSFunctionThreatLevel''' is absent from the configuration file, the default value is '''VeryLow'''.
@@ Line 70: / Line 64: @@
 Allow_osTeleportAgent = a1cbbdd7-8adb-4158-aa52-c0ee882c4492,9cab27da-764c-4469-a628-369d978ba436
 </source>
 <br>

← Older revision		Revision as of 23:44, 10 June 2011
Line 1:		Line 1:
−	{{~~Template:~~Quicklinks}} To permit region owners to enable the extended scripting functionality of [[OSSL]], without allowing malicious scripts to access potentially troublesome functions, each OSSL function is assigned a '''threat level''', and access to the functions is granted or denied based on a default threshold set in '''OpenSim.ini''' (which can be overridden for individual functions on a case-by-case basis).  Review [[OSSL_Enabling_Functions]] page with a full example for Implementing the various osFunctions for your system.	+	{{Quicklinks}} To permit region owners to enable the extended scripting functionality of [[OSSL]], without allowing malicious scripts to access potentially troublesome functions, each OSSL function is assigned a '''threat level''', and access to the functions is granted or denied based on a default threshold set in '''OpenSim.ini''' (which can be overridden for individual functions on a case-by-case basis).  Review [[OSSL_Enabling_Functions]] page with a full example for Implementing the various osFunctions for your system.

	The threat levels, from wholly unthreatening to most potentially damaging, are:		The threat levels, from wholly unthreatening to most potentially damaging, are:

@@ Line 20: / Line 20: @@
 :Even casual use is a danger to region stability, or function allows console or OS command execution, or function allows taking money without consent, or allows deletion or modification of user data, or allows the compromise of sensitive data by design.
-<br>The '''OSFunctionThreatLevel''' setting in the script engines' configuration sections of [[OpenSim.ini]] controls what classes of functions are accessible to scripts owned by any avatar; any function at the same threat level or lower than the value provided for '''OsFunctionThreatLevel''' is permitted to run. If '''OSFunctionThreatLevel''' is absent from the configuration file, the default value is '''VeryLow'''.
+<br>The '''OSFunctionThreatLevel''' setting in the script engines' configuration sections of OpenSim.ini controls what classes of functions are accessible to scripts owned by any avatar; any function at the same threat level or lower than the value provided for '''OsFunctionThreatLevel''' is permitted to run. If '''OSFunctionThreatLevel''' is absent from the configuration file, the default value is '''VeryLow'''.
 OSSL functions may also be permitted or prohibited on an individual basis, by adding '''Allow_*''' lines to the script engine's configuration section. To permit scripts owned by anyone to access a function, even if its threat level exceeds the value of '''OSFunctionThreatLevel''', use the value 'true':