From c91c24441bb114502f0d49d026cfce0b47045c40 Mon Sep 17 00:00:00 2001
From: Adam Frisby
Date: Thu, 9 Apr 2009 13:14:25 +0000
Subject: * Limits MRM scripting to Region Master Avatar only. * This makes MRM
 scripting ever so slightly more secure. If you have enforced Object
 Permissions enabled, it may be acceptable to enable MRM within your regions.
 * Security bug reports on this feature are much appreciated (eg: anyone
 finding ways around this to execute a MRM as a basic user).

---
 OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

(limited to 'OpenSim/Region/OptionalModules/Scripting')

diff --git a/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs b/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs
index 71077f2..910ddea 100644
--- a/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs
+++ b/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs
@@ -73,8 +73,11 @@ namespace OpenSim.Region.OptionalModules.Scripting.Minimodule
 
         void EventManager_OnRezScript(uint localID, UUID itemID, string script, int startParam, bool postOnRez, string engine, int stateSource)
         {
-            if (script.StartsWith("//MiniMod:C#"))
+            if (script.StartsWith("//MRM:C#"))
             {
+                if(m_scene.GetSceneObjectPart(localID).OwnerID != m_scene.RegionInfo.MasterAvatarAssignedUUID)
+                    return;
+
                 try
                 {
                     m_log.Info("[MRM] Found C# MRM");
-- 
cgit v1.1