[Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

[AJLDuarte]

Yes those also, thx

Ubit

 

From: opensim-users-bounces at opensimulator.org [mailto:opensim-users-bounces at opensimulator.org] On Behalf Of Shaun T. Erickson
Sent: Thursday, June 29, 2017 21:58
To: opensim-users at opensimulator.org
Subject: Re: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

 

Ubit,

 

Please learn to say "threat", not "thread" when talking about threat levels. The words have two very different meanings. :)

 

-ste

 

On Thu, Jun 29, 2017 at 3:38 PM, AJLDuarte <ajlduarte at sapo.pt> wrote:

Hi,
        No.. "no level check" means just that, thread level check is skipped, either because they are just simple functions and those checks are pure waste on time and resources, or because thread level logic does not apply, or it is not configurable.

        This does not relate directly to security in all cases: osGetAgentIP does not check thread level anymore

        It makes no sense (it it ever did) to keep the rule of having a "allow_name" for ALL ossl functions, and only those, when some LSL ones should actually have it also.


Detection of the physics engine (in future possible more simulator features/settings) cannot be a security issue, That must be open information, or it is useless.

Ubit





-----Original Message-----
From: opensim-users-bounces at opensimulator.org [mailto:opensim-users-bounces at opensimulator.org] On Behalf Of André Verwijs
Sent: Thursday, June 29, 2017 08:35
To: opensim-users opensimulator.org
Subject: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)


git master: 6bac44e767819b6aa82d0ed503c5bcc7f72b9883

question:
so commands with no level check should not be enabled..?? in terms of security

P.S.
"Allow_osCheckODE"  should be Moderate or High,  this is more important than level "none" commands...
core and/or scripting engine commands should be (very)high level in terms of security...



______________________________________________________________________________________

JAV-logo-met-naam
<http://www.facebook.com/andre.verwijs>

La Ventura (heavy metal band) Tumblr page:
http://laventurafan.tumblr.com

My Twitter Page:
http://twitter.com/OpenSimFan

My Facebook page (Be my friend please :) ) http://www.facebook.com/andre.verwijs

My Google+ page (follow me please )
André Verwijs - Google+ https://plus.google.com/111310545842863442992

_______________________________________________
Opensim-users mailing list
Opensim-users at opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

_______________________________________________
Opensim-users mailing list
Opensim-users at opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users





 

-- 

        -ste

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://opensimulator.org/pipermail/opensim-users/attachments/20170629/c9a9c5b0/attachment.html>