<div dir="ltr">Ubit,<div><br></div><div>Please learn to say "threat", not "thread" when talking about threat levels. The words have two very different meanings. :)</div><div><br></div><div>-ste</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Jun 29, 2017 at 3:38 PM, AJLDuarte <span dir="ltr"><<a href="mailto:ajlduarte@sapo.pt" target="_blank">ajlduarte@sapo.pt</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi,<br>
No.. "no level check" means just that, thread level check is skipped, either because they are just simple functions and those checks are pure waste on time and resources, or because thread level logic does not apply, or it is not configurable.<br>
<br>
This does not relate directly to security in all cases: osGetAgentIP does not check thread level anymore<br>
<br>
It makes no sense (it it ever did) to keep the rule of having a "allow_name" for ALL ossl functions, and only those, when some LSL ones should actually have it also.<br>
<br>
<br>
Detection of the physics engine (in future possible more simulator features/settings) cannot be a security issue, That must be open information, or it is useless.<br>
<br>
Ubit<br>
<br>
<br>
<br>
<br>
<br>
-----Original Message-----<br>
From: <a href="mailto:opensim-users-bounces@opensimulator.org">opensim-users-bounces@<wbr>opensimulator.org</a> [mailto:<a href="mailto:opensim-users-bounces@opensimulator.org">opensim-users-bounces@<wbr>opensimulator.org</a>] On Behalf Of André Verwijs<br>
Sent: Thursday, June 29, 2017 08:35<br>
To: opensim-users <a href="http://opensimulator.org" rel="noreferrer" target="_blank">opensimulator.org</a><br>
Subject: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)<br>
<br>
<br>
git master: 6bac44e767819b6aa82d0ed503c5bc<wbr>c7f72b9883<br>
<br>
question:<br>
so commands with no level check should not be enabled..?? in terms of security<br>
<br>
P.S.<br>
"Allow_osCheckODE" should be Moderate or High, this is more important than level "none" commands...<br>
core and/or scripting engine commands should be (very)high level in terms of security...<br>
<br>
<br>
<br>
______________________________<wbr>______________________________<wbr>__________________________<br>
<br>
JAV-logo-met-naam<br>
<<a href="http://www.facebook.com/andre.verwijs" rel="noreferrer" target="_blank">http://www.facebook.com/<wbr>andre.verwijs</a>><br>
<br>
La Ventura (heavy metal band) Tumblr page:<br>
<a href="http://laventurafan.tumblr.com" rel="noreferrer" target="_blank">http://laventurafan.tumblr.com</a><br>
<br>
My Twitter Page:<br>
<a href="http://twitter.com/OpenSimFan" rel="noreferrer" target="_blank">http://twitter.com/OpenSimFan</a><br>
<br>
My Facebook page (Be my friend please :) ) <a href="http://www.facebook.com/andre.verwijs" rel="noreferrer" target="_blank">http://www.facebook.com/andre.<wbr>verwijs</a><br>
<br>
My Google+ page (follow me please )<br>
André Verwijs - Google+ <a href="https://plus.google.com/111310545842863442992" rel="noreferrer" target="_blank">https://plus.google.com/<wbr>111310545842863442992</a><br>
<br>
______________________________<wbr>_________________<br>
Opensim-users mailing list<br>
<a href="mailto:Opensim-users@opensimulator.org">Opensim-users@opensimulator.<wbr>org</a><br>
<a href="http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users" rel="noreferrer" target="_blank">http://opensimulator.org/cgi-<wbr>bin/mailman/listinfo/opensim-<wbr>users</a><br>
<br>
______________________________<wbr>_________________<br>
Opensim-users mailing list<br>
<a href="mailto:Opensim-users@opensimulator.org">Opensim-users@opensimulator.<wbr>org</a><br>
<a href="http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users" rel="noreferrer" target="_blank">http://opensimulator.org/cgi-<wbr>bin/mailman/listinfo/opensim-<wbr>users</a><br>
</blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"> -ste</div>
</div>