[Opensim-dev] Fix provider selection and possible security issue with plugins

Melanie melanie at t-data.com
Tue Jul 29 12:07:17 UTC 2008


Hello,

as commented on Mantis, it would be wrong to disallow loading of 
arbitrary DLLs. There are already extensions that are not in the 
core SVN, and there will be more. These currently work by dropping 
them into bin.
I believe it's wrong to limit OpenSim to loading plugins known at 
compile time.
I don't know if that is where you want to go, but one of your 
comments gave me that impression. I would feel very uncomfortable 
with any change that limits the system to loading only DLLs listed 
in core code.

Melanie


Ryan McDougall wrote:
> Details on mantis.
> 
> http://opensimulator.org/mantis/view.php?id=1852
> 
> Review and commit as usual would be greatly appreciated. Next step is
> documenting the process of making a "new-style" plugin:
> http://opensimulator.org/wiki/How_to_create_a_dynamic_plugin
> 
> Finally, I think the most important dynamic loading is done, outside of
> RegionModules, which I haven't touched for now. The completed plugins
> are:
> 
> IApplicationPlugin
> IGridPlugin
> IGridDataPlugin
> ILogDataPlugin
> 
> The plugins I should also do because they are probably important:
> 
> IAssetProvider
> IInventoryData
> IUserData
> 
> The rest should be a simple transformation based on my instructions
> (when they're finished). Anyone want to go for some low-hanging fruit by
> finishing the process? 
> 
> IGenericConfig
> IDataSnapshotProvider
> IClientNetworkServer
> IPhysicsPlugin
> IMeshingPlugin
> IRegionDataStore
> IEstateDataStore
> ITerrainEffect
> ITarget
> IDataNode
> 
> Lastly, is there a special meaning given to ifaces that end with Data or
> Provider?
> 
> Cheers,
> 
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
> 
> 



More information about the Opensim-dev mailing list