[Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

[Shaun T. Erickson]

Ubit,

Please learn to say "threat", not "thread" when talking about threat
levels. The words have two very different meanings. :)

-ste

On Thu, Jun 29, 2017 at 3:38 PM, AJLDuarte <ajlduarte at sapo.pt> wrote:

> Hi,
>         No.. "no level check" means just that, thread level check is
> skipped, either because they are just simple functions and those checks are
> pure waste on time and resources, or because thread level logic does not
> apply, or it is not configurable.
>
>         This does not relate directly to security in all cases:
> osGetAgentIP does not check thread level anymore
>
>         It makes no sense (it it ever did) to keep the rule of having a
> "allow_name" for ALL ossl functions, and only those, when some LSL ones
> should actually have it also.
>
>
> Detection of the physics engine (in future possible more simulator
> features/settings) cannot be a security issue, That must be open
> information, or it is useless.
>
> Ubit
>
>
>
>
>
> -----Original Message-----
> From: opensim-users-bounces at opensimulator.org [mailto:
> opensim-users-bounces at opensimulator.org] On Behalf Of André Verwijs
> Sent: Thursday, June 29, 2017 08:35
> To: opensim-users opensimulator.org
> Subject: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)
>
>
> git master: 6bac44e767819b6aa82d0ed503c5bcc7f72b9883
>
> question:
> so commands with no level check should not be enabled..?? in terms of
> security
>
> P.S.
> "Allow_osCheckODE"  should be Moderate or High,  this is more important
> than level "none" commands...
> core and/or scripting engine commands should be (very)high level in terms
> of security...
>
>
>
> ____________________________________________________________
> __________________________
>
> JAV-logo-met-naam
> <http://www.facebook.com/andre.verwijs>
>
> La Ventura (heavy metal band) Tumblr page:
> http://laventurafan.tumblr.com
>
> My Twitter Page:
> http://twitter.com/OpenSimFan
>
> My Facebook page (Be my friend please :) ) http://www.facebook.com/andre.
> verwijs
>
> My Google+ page (follow me please )
> André Verwijs - Google+ https://plus.google.com/111310545842863442992
>
> _______________________________________________
> Opensim-users mailing list
> Opensim-users at opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
>
> _______________________________________________
> Opensim-users mailing list
> Opensim-users at opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
>



-- 
        -ste
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-users/attachments/20170629/da695958/attachment.html>