[Opensim-users] OSSL OSFunctionThreatLevel no longer, works [Ferd Frederix]

[Thomas Ringate]

Fred,

Thanks for the very descriptive explanation.  Yes, the osslEnable.ini sure 
did over ride the setting of the threat level.  I have done as you indicated 
and removed everything from my gridcommon.ini and am using the osslEnable 
file now.

To save time until I can read more about all the functions, I set everything 
to true that was listed as threat level very high and below.

Those I had listed were those I was using myself in scripts I wrote.

I guess the reason I used the threat level was because I was lazy and didn't 
want to ask everyone what script or object was giving the errors.

I trust my residents, but like you point out, anyone could arrive and have a 
script on them using a function that could bring the server to it's knees.

I am sure many of the functions are never used on my regions, so like you 
said, having them all set to true is probably not a good idea at all.

For now the complaining has stopped, and I can take the time to review the 
functions and revert back to the suggested settings if they are for 
functions no one is using.

Thanks again for the great explanation.

Tom


-----Original Message----- 
From: Fred Beckhusen
Sent: Tuesday, October 27, 2015 12:10 PM
To: opensim-users at opensimulator.org
Subject: [Opensim-users] OSSL OSFunctionThreatLevel no longer,works [Ferd 
Frederix]

On 2015-10-27 7:00 AM, opensim-users-request at opensimulator.org wrote:

> Date: Mon, 26 Oct 2015 15:42:56 -0400
> From: "Thomas Ringate"<tringate at gmail.com>
> To:<opensim-users at opensimulator.org>Subject: Re: [Opensim-users] OSSL 
> OSFunctionThreatLevel no longer
> works in opensim since the OSgrid packaged release of 2015-10-18 0.8.3
> dev

Hi Thomas:

You had OSFunctionThreatLevel = VeryHigh followed by a list of Allow* = true 
in your original ini files.  OSFunctionThreatLevel = VeryHigh  was probably 
all you needed.   That one line set all functions "true" so anyone can do 
anything they want, which is also very dangerous. Any visitor could easily 
kill your systems with that high of a threat level. In spite of the 
warnings, pretty much everyone set it to VeryHigh (including me) which was 
not good.

It appears from what I read  in you notes that the update did as expected - 
it overrode your setting in "osslEnable.ini", and defaulted to a 'standard' 
config for you.

The idea behind the osslEnable.ini  is that grid owners now have one well 
documented place, with examples and macros, to set exactly what they want. 
The macros make it much easier to set the system up for the wide security 
ranges everyone needs.   The osslEnable.ini file can be copied from system 
to system  and used again after an update.  You can enable any threat level 
there, and delete or comment out the individual settings,  or you could 
follow the examples and enable these for just estate owners and parcel 
owners, or individual people.    Or set them to true so everyone can run 
them.  And then copy that file around the various places you need them.

I made the original list of commands for this file, others then added to 
them, and we think we have all of the functions listed. If you see any that 
are not please let me know, or file a Mantis and we will get it added.

Cheers, Ferd Frederix
fred at mitsi.com


_______________________________________________
Opensim-users mailing list
Opensim-users at opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users