[Opensim-dev] osFunction Threat levels

[Justin Clark-Casey]

Ai Austin wrote:
> Justin has been helping me get on top of osFunctions, and the Wiki 
> hopefully entry now is more comprehensive...
>       http://opensimulator.org/wiki/OSSL_Implemented
> 
> In my review of the threat levels of the various functions, 
> osRegionRestart seems to be wrongly set.  Can we discuss?  I would 
> consider this Severe or Critical.  To keep it separate to "usual" 
> functionality and messaging style things.

I just came back to look at this again and read a bit further into the function in OSSL_Api.cs.  Calls to this function 
are actually further guarded by a CanIssueEstateCommand permissions check.  So I do now agree with what the comment states.

> 
> A comment on function code itself (thanks to Justin for this) says:
> 
>              // This is High here because region restart is not reliable
>              // it may result in the region staying down or becoming
>              // unstable. This should be changed to Low or VeryLow once
>              // The underlying functionality is fixed, since the security
>              // as such is sound
>              //
> 
> _______________________________________________
> Opensim-dev mailing list
> Opensim-dev at lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/opensim-dev
> 


-- 
justincc
Justin Clark-Casey
http://justincc.wordpress.com