Re: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

2017-06-29 Thread AJLDuarte 
Yes those also, thx

Ubit

 

From: opensim-users-boun...@opensimulator.org 
[mailto:opensim-users-boun...@opensimulator.org] On Behalf Of Shaun T. Erickson
Sent: Thursday, June 29, 2017 21:58
To: opensim-users@opensimulator.org
Subject: Re: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

 

Ubit,

 

Please learn to say "threat", not "thread" when talking about threat levels. 
The words have two very different meanings. :)

 

-ste

 

On Thu, Jun 29, 2017 at 3:38 PM, AJLDuarte  wrote:

Hi,
No.. "no level check" means just that, thread level check is skipped, 
either because they are just simple functions and those checks are pure waste 
on time and resources, or because thread level logic does not apply, or it is 
not configurable.

This does not relate directly to security in all cases: osGetAgentIP 
does not check thread level anymore

It makes no sense (it it ever did) to keep the rule of having a 
"allow_name" for ALL ossl functions, and only those, when some LSL ones should 
actually have it also.


Detection of the physics engine (in future possible more simulator 
features/settings) cannot be a security issue, That must be open information, 
or it is useless.

Ubit





-Original Message-
From: opensim-users-boun...@opensimulator.org 
[mailto:opensim-users-boun...@opensimulator.org] On Behalf Of André Verwijs
Sent: Thursday, June 29, 2017 08:35
To: opensim-users opensimulator.org
Subject: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)


git master: 6bac44e767819b6aa82d0ed503c5bcc7f72b9883

question:
so commands with no level check should not be enabled..?? in terms of security

P.S.
"Allow_osCheckODE"  should be Moderate or High,  this is more important than 
level "none" commands...
core and/or scripting engine commands should be (very)high level in terms of 
security...



__

JAV-logo-met-naam


La Ventura (heavy metal band) Tumblr page:
http://laventurafan.tumblr.com

My Twitter Page:
http://twitter.com/OpenSimFan

My Facebook page (Be my friend please :) ) http://www.facebook.com/andre.verwijs

My Google+ page (follow me please )
André Verwijs - Google+ https://plus.google.com/111310545842863442992

___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users





 

-- 

-ste

___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

Re: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

2017-06-29 Thread Shaun T. Erickson 
Ubit,

Please learn to say "threat", not "thread" when talking about threat
levels. The words have two very different meanings. :)

-ste

On Thu, Jun 29, 2017 at 3:38 PM, AJLDuarte  wrote:

> Hi,
> No.. "no level check" means just that, thread level check is
> skipped, either because they are just simple functions and those checks are
> pure waste on time and resources, or because thread level logic does not
> apply, or it is not configurable.
>
> This does not relate directly to security in all cases:
> osGetAgentIP does not check thread level anymore
>
> It makes no sense (it it ever did) to keep the rule of having a
> "allow_name" for ALL ossl functions, and only those, when some LSL ones
> should actually have it also.
>
>
> Detection of the physics engine (in future possible more simulator
> features/settings) cannot be a security issue, That must be open
> information, or it is useless.
>
> Ubit
>
>
>
>
>
> -Original Message-
> From: opensim-users-boun...@opensimulator.org [mailto:
> opensim-users-boun...@opensimulator.org] On Behalf Of André Verwijs
> Sent: Thursday, June 29, 2017 08:35
> To: opensim-users opensimulator.org
> Subject: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)
>
>
> git master: 6bac44e767819b6aa82d0ed503c5bcc7f72b9883
>
> question:
> so commands with no level check should not be enabled..?? in terms of
> security
>
> P.S.
> "Allow_osCheckODE"  should be Moderate or High,  this is more important
> than level "none" commands...
> core and/or scripting engine commands should be (very)high level in terms
> of security...
>
>
>
> 
> __
>
> JAV-logo-met-naam
> 
>
> La Ventura (heavy metal band) Tumblr page:
> http://laventurafan.tumblr.com
>
> My Twitter Page:
> http://twitter.com/OpenSimFan
>
> My Facebook page (Be my friend please :) ) http://www.facebook.com/andre.
> verwijs
>
> My Google+ page (follow me please )
> André Verwijs - Google+ https://plus.google.com/111310545842863442992
>
> ___
> Opensim-users mailing list
> Opensim-users@opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
>
> ___
> Opensim-users mailing list
> Opensim-users@opensimulator.org
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
>



-- 
-ste
___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

Re: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

2017-06-29 Thread AJLDuarte 
Hi,
No.. "no level check" means just that, thread level check is skipped, 
either because they are just simple functions and those checks are pure waste 
on time and resources, or because thread level logic does not apply, or it is 
not configurable.

This does not relate directly to security in all cases: osGetAgentIP 
does not check thread level anymore

It makes no sense (it it ever did) to keep the rule of having a 
"allow_name" for ALL ossl functions, and only those, when some LSL ones should 
actually have it also.


Detection of the physics engine (in future possible more simulator 
features/settings) cannot be a security issue, That must be open information, 
or it is useless.

Ubit





-Original Message-
From: opensim-users-boun...@opensimulator.org 
[mailto:opensim-users-boun...@opensimulator.org] On Behalf Of André Verwijs
Sent: Thursday, June 29, 2017 08:35
To: opensim-users opensimulator.org
Subject: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)


git master: 6bac44e767819b6aa82d0ed503c5bcc7f72b9883

question:
so commands with no level check should not be enabled..?? in terms of security

P.S.
"Allow_osCheckODE"  should be Moderate or High,  this is more important than 
level "none" commands...
core and/or scripting engine commands should be (very)high level in terms of 
security...



__

JAV-logo-met-naam


La Ventura (heavy metal band) Tumblr page:
http://laventurafan.tumblr.com

My Twitter Page:
http://twitter.com/OpenSimFan

My Facebook page (Be my friend please :) ) http://www.facebook.com/andre.verwijs

My Google+ page (follow me please )
André Verwijs - Google+ https://plus.google.com/111310545842863442992

___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

[Opensim-users] idea about "allowed_script_creators" (OpenSimDefault.ini)

2017-06-29 Thread André Verwijs 



would it be a great idea (or possible) to set "allowed_script_creators" 
to: "ESTATE_MANAGER,ESTATE_OWNER" this way you don't have to switch to 
god modes and back. Or set it by UUID key.



; Control user types that are allowed to create new scripts
; Only enforced if serviceside_object_permissions is true
;
; Current possible values are
; all - anyone can create scripts (subject to normal permissions)
; gods - only administrators can create scripts (as long as 
allow_grid_gods is true)

; Default value is all
; allowed_script_creators = all

; Control user types that are allowed to edit (save) scripts
; Only enforced if serviceside_object_permissions is true
;
; Current possible values are
; all - anyone can edit scripts (subject to normal permissions)
; gods - only administrators can edit scripts (as long as 
allow_grid_gods is true)

; Default value is all
; allowed_script_editors = all


if yes i will in feature request within mantis..
André

..
__

JAV-logo-met-naam


La Ventura (heavy metal band) Tumblr page:
http://laventurafan.tumblr.com

My Twitter Page:
http://twitter.com/OpenSimFan

My Facebook page (Be my friend please :) )
http://www.facebook.com/andre.verwijs

My Google+ page (follow me please )
André Verwijs - Google+ https://plus.google.com/111310545842863442992

___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users

[Opensim-users] latest osslEnable.ini - (git master: 6bac44e)

2017-06-29 Thread André Verwijs 


git master: 6bac44e767819b6aa82d0ed503c5bcc7f72b9883

question:
so commands with no level check should not be enabled..?? in terms of 
security


P.S.
"Allow_osCheckODE"  should be Moderate or High,  this is more important 
than level "none" commands...
core and/or scripting engine commands should be (very)high level in 
terms of security...




__

JAV-logo-met-naam


La Ventura (heavy metal band) Tumblr page:
http://laventurafan.tumblr.com

My Twitter Page:
http://twitter.com/OpenSimFan

My Facebook page (Be my friend please :) )
http://www.facebook.com/andre.verwijs

My Google+ page (follow me please )
André Verwijs - Google+ https://plus.google.com/111310545842863442992

___
Opensim-users mailing list
Opensim-users@opensimulator.org
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users