Hi,
No.. "no level check" means just that, thread level check is skipped,
either because they are just simple functions and those checks are pure waste
on time and resources, or because thread level logic does not apply, or it is
not configurable.
This does not relate directly to security in all cases: osGetAgentIP
does not check thread level anymore
It makes no sense (it it ever did) to keep the rule of having a
"allow_name" for ALL ossl functions, and only those, when some LSL ones should
actually have it also.
Detection of the physics engine (in future possible more simulator
features/settings) cannot be a security issue, That must be open information,
or it is useless.
Ubit
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of André Verwijs
Sent: Thursday, June 29, 2017 08:35
To: opensim-users opensimulator.org
Subject: [Opensim-users] latest osslEnable.ini - (git master: 6bac44e)
git master: 6bac44e767819b6aa82d0ed503c5bcc7f72b9883
question:
so commands with no level check should not be enabled..?? in terms of security
P.S.
"Allow_osCheckODE" should be Moderate or High, this is more important than
level "none" commands...
core and/or scripting engine commands should be (very)high level in terms of
security...
______________________________________________________________________________________
JAV-logo-met-naam
<http://www.facebook.com/andre.verwijs>
La Ventura (heavy metal band) Tumblr page:
http://laventurafan.tumblr.com
My Twitter Page:
http://twitter.com/OpenSimFan
My Facebook page (Be my friend please :) ) http://www.facebook.com/andre.verwijs
My Google+ page (follow me please )
André Verwijs - Google+ https://plus.google.com/111310545842863442992
_______________________________________________
Opensim-users mailing list
[email protected]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
_______________________________________________
Opensim-users mailing list
[email protected]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users