OSSL OSFunctionThreatLevel no longer, works [Ferd Frederix]

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

OSSL OSFunctionThreatLevel no longer, works [Ferd Frederix]

Fred Beckhusen-2
On 2015-10-27 7:00 AM, [hidden email] wrote:

> Date: Mon, 26 Oct 2015 15:42:56 -0400
> From: "Thomas Ringate"<[hidden email]>
> To:<[hidden email]>Subject: Re: [Opensim-users] OSSL OSFunctionThreatLevel no longer
> works in opensim since the OSgrid packaged release of 2015-10-18 0.8.3
> dev

Hi Thomas:

You had OSFunctionThreatLevel = VeryHigh followed by a list of Allow* = true in your original ini files.  OSFunctionThreatLevel = VeryHigh  was probably all you needed.   That one line set all functions "true" so anyone can do anything they want, which is also very dangerous. Any visitor could easily kill your systems with that high of a threat level. In spite of the warnings, pretty much everyone set it to VeryHigh (including me) which was not good.

It appears from what I read  in you notes that the update did as expected - it overrode your setting in "osslEnable.ini", and defaulted to a 'standard' config for you.

The idea behind the osslEnable.ini  is that grid owners now have one well documented place, with examples and macros, to set exactly what they want.  The macros make it much easier to set the system up for the wide security ranges everyone needs.   The osslEnable.ini file can be copied from system to system  and used again after an update.  You can enable any threat level there, and delete or comment out the individual settings,  or you could follow the examples and enable these for just estate owners and parcel owners, or individual people.    Or set them to true so everyone can run them.  And then copy that file around the various places you need them.

I made the original list of commands for this file, others then added to them, and we think we have all of the functions listed. If you see any that are not please let me know, or file a Mantis and we will get it added.

Cheers, Ferd Frederix
[hidden email]


_______________________________________________
Opensim-users mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users
Reply | Threaded
Open this post in threaded view
|

Re: OSSL OSFunctionThreatLevel no longer, works [Ferd Frederix]

tringate
Fred,

Thanks for the very descriptive explanation.  Yes, the osslEnable.ini sure
did over ride the setting of the threat level.  I have done as you indicated
and removed everything from my gridcommon.ini and am using the osslEnable
file now.

To save time until I can read more about all the functions, I set everything
to true that was listed as threat level very high and below.

Those I had listed were those I was using myself in scripts I wrote.

I guess the reason I used the threat level was because I was lazy and didn't
want to ask everyone what script or object was giving the errors.

I trust my residents, but like you point out, anyone could arrive and have a
script on them using a function that could bring the server to it's knees.

I am sure many of the functions are never used on my regions, so like you
said, having them all set to true is probably not a good idea at all.

For now the complaining has stopped, and I can take the time to review the
functions and revert back to the suggested settings if they are for
functions no one is using.

Thanks again for the great explanation.

Tom


-----Original Message-----
From: Fred Beckhusen
Sent: Tuesday, October 27, 2015 12:10 PM
To: [hidden email]
Subject: [Opensim-users] OSSL OSFunctionThreatLevel no longer,works [Ferd
Frederix]

On 2015-10-27 7:00 AM, [hidden email] wrote:

> Date: Mon, 26 Oct 2015 15:42:56 -0400
> From: "Thomas Ringate"<[hidden email]>
> To:<[hidden email]>Subject: Re: [Opensim-users] OSSL
> OSFunctionThreatLevel no longer
> works in opensim since the OSgrid packaged release of 2015-10-18 0.8.3
> dev

Hi Thomas:

You had OSFunctionThreatLevel = VeryHigh followed by a list of Allow* = true
in your original ini files.  OSFunctionThreatLevel = VeryHigh  was probably
all you needed.   That one line set all functions "true" so anyone can do
anything they want, which is also very dangerous. Any visitor could easily
kill your systems with that high of a threat level. In spite of the
warnings, pretty much everyone set it to VeryHigh (including me) which was
not good.

It appears from what I read  in you notes that the update did as expected -
it overrode your setting in "osslEnable.ini", and defaulted to a 'standard'
config for you.

The idea behind the osslEnable.ini  is that grid owners now have one well
documented place, with examples and macros, to set exactly what they want.
The macros make it much easier to set the system up for the wide security
ranges everyone needs.   The osslEnable.ini file can be copied from system
to system  and used again after an update.  You can enable any threat level
there, and delete or comment out the individual settings,  or you could
follow the examples and enable these for just estate owners and parcel
owners, or individual people.    Or set them to true so everyone can run
them.  And then copy that file around the various places you need them.

I made the original list of commands for this file, others then added to
them, and we think we have all of the functions listed. If you see any that
are not please let me know, or file a Mantis and we will get it added.

Cheers, Ferd Frederix
[hidden email]


_______________________________________________
Opensim-users mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users 

_______________________________________________
Opensim-users mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-users