[Flightgear-devel] [SECURITY] Nasal: io.open() restricted

2008-06-13 Thread Melchior FRANZ
It's well known that Nasal has an io module with wrappers around fopen(), fclose(), etc. An aircraft that you install, or even scenery objects with embedded Nasal could in the past use this to delete the contents of your whole home directory, or to append commands to ~/.bashrc, and thus execute

[Flightgear-devel] [OT] How can I start up in air?

2008-06-13 Thread Holger Wirtz
Hi, sorry, this is perhaps a little bit off topic but I haven't found any answers the last days: How can I start up at a specific position in air? I found some hints at http://wiki.flightgear.org/index.php/Starting_in_the_Air but if I use the SenecaII I have the problem that the magnetos are

Re: [Flightgear-devel] [SECURITY] Nasal: io.open() restricted

2008-06-13 Thread Csaba Halász
On Fri, Jun 13, 2008 at 2:01 PM, Melchior FRANZ [EMAIL PROTECTED] wrote: FG_HOME, /tmp/, /var/tmp/, [A-Za-z]:TMP/, [A-Za-z]:TEMP/, [A-Za-z]:/TMP/, [A-Za-z]:/TEMP/, Please tell me if this doesn't work for you, or if want more. You can add * as first entry to

Re: [Flightgear-devel] [SECURITY] Nasal: io.open() restricted

2008-06-13 Thread Arnt Karlsen
On Fri, 13 Jun 2008 17:10:11 +0200, Csaba wrote in message [EMAIL PROTECTED]: On Fri, Jun 13, 2008 at 2:01 PM, Melchior FRANZ [EMAIL PROTECTED] wrote: FG_HOME, /tmp/, /var/tmp/, [A-Za-z]:TMP/, [A-Za-z]:TEMP/, [A-Za-z]:/TMP/, [A-Za-z]:/TEMP/, Please tell

Re: [Flightgear-devel] [SECURITY] Nasal: io.open() restricted

2008-06-13 Thread Melchior FRANZ
* Csaba Halász -- Friday 13 June 2008: On Fri, Jun 13, 2008 at 2:01 PM, Melchior FRANZ [EMAIL PROTECTED] wrote: [A-Za-z]:TMP/, [A-Za-z]:TEMP/, [A-Za-z]:/TMP/, [A-Za-z]:/TEMP/, You might consider the TEMP and TMPDIR environment variables too. On Unix I'd even suggest to let

Re: [Flightgear-devel] [OT] How can I start up in air?

2008-06-13 Thread Fabian Grodek
On 6/13/08, Holger Wirtz [EMAIL PROTECTED] wrote: Hi, sorry, this is perhaps a little bit off topic but I haven't found any answers the last days: How can I start up at a specific position in air? I found some hints at http://wiki.flightgear.org/index.php/Starting_in_the_Air but if I use

[Flightgear-devel] Trouble with pick animation

2008-06-13 Thread Heiko Schulz
Hi, Making clickspots with the OSG-pick-animation showed me some trouble. It is difficult to explain for me, I try my very best: The manual How-to said, that there is no difference to the old plib:The Commands are the usual bindings like used elsewhere in flightgear. So I used the same