From 9dd6619e1ddc147c8d65fc7aba98a99cadf51289 Mon Sep 17 00:00:00 2001 From: David Walter Seikel Date: Mon, 7 Nov 2016 17:12:28 +1000 Subject: Adjust OS script functions threat levels, and don't bother wasting time checking those with no threat level. Some went up, some went down. Should be more sane now. --- config/config-include/osslEnable.ini | 259 ++++++++++++----------------------- 1 file changed, 88 insertions(+), 171 deletions(-) (limited to 'config/config-include/osslEnable.ini') diff --git a/config/config-include/osslEnable.ini b/config/config-include/osslEnable.ini index 0a03d4c..0d333c4 100644 --- a/config/config-include/osslEnable.ini +++ b/config/config-include/osslEnable.ini @@ -9,15 +9,21 @@ ; mis-used so the permission to execute a function can be limited. Ability to ; execute a function is based on the owner of the prim holding the script. +[LightShare] + ; This enables the transmission of Windlight scenes to supporting clients, such as the Meta7 viewer. + ; It has no ill effect on viewers which do not support server-side windlight settings. + enable_windlight = true + + +[NPC] + ;; Enable Non Player Character (NPC) facilities + Enabled = true + + [XEngine] ; Allow the use of os* functions (some are dangerous) AllowOSFunctions = true - ; Allow the user of mod* functions. This allows a script to pass messages - ; to a region module via the modSendCommand() function and is used by some - ; modules to extend the scripting language. - AllowMODFunctions = true - ; Allow the use of LightShare functions. ; The setting enable_windlight = true must also be enabled in the [LightShare] section. AllowLightShareFunctions = true @@ -29,7 +35,7 @@ ; than 'Low' unless you have a high level of trust in all the users that can run scripts ; in your simulator. It is safer to explicitly allow certain types of user to run ; higher threat level OSSL functions, as detailed later on. - OSFunctionThreatLevel = VeryLow + OSFunctionThreatLevel = Moderate ; Each of the OSSL functions can be enabled or disabled individually. ; To disable, set the value to 'false'. @@ -48,183 +54,94 @@ ; 'Creators_". The 'Creators_" parameters can only be a list of UUIDs and it is ; checked against the creator of the script itself. - ; Allowing ossl functions for anyone owning a parcel can be dangerous especially if - ; a region is selling or otherwise giving away parcel ownership. By default, parcel - ; ownership or group membership does not enable OSSL functions. Uncomment the - ; appropriate line below to allow parcel ownership and groups to do restricted - ; OSSL functions. It might be better to check the list below and edit the ones - ; to enable individually. - osslParcelO = "" - osslParcelOG = "" - ; osslParcelO = "PARCEL_OWNER," - ; osslParcelOG = "PARCEL_GROUP_MEMBER,PARCEL_OWNER," - - ; There are a block of functions for creating and controlling NPCs. - ; These can be mis-used so limit use to those you can trust. - osslNPC = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - - ; ThreatLevel None - Allow_osDrawEllipse = true - Allow_osDrawFilledPolygon = true - Allow_osDrawFilledRectangle = true - Allow_osDrawImage = true - Allow_osDrawLine = true - Allow_osDrawPolygon = true - Allow_osDrawRectangle = true - Allow_osDrawText = true - Allow_osGetAgents = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetAvatarList = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetCurrentSunHour = true - Allow_osGetGender = true - Allow_osGetHealth = true - Allow_osGetInventoryDesc = true - Allow_osGetMapTexture = true - Allow_osGetRegionSize = true - Allow_osGetRezzingObject = true - Allow_osGetSunParam = true - Allow_osGetTerrainHeight = true - Allow_osIsNpc = true - Allow_osIsUUID = true - Allow_osList2Double = true - Allow_osMax = true - Allow_osMin = true - Allow_osMovePen = true - Allow_osNpcGetOwner = ${XEngine|osslNPC} - Allow_osParseJSON = true - Allow_osParseJSONNew = true - Allow_osSetFontName = true - Allow_osSetFontSize = true - Allow_osSetPenCap = true - Allow_osSetPenColor = true - Allow_osSetPenSize = true - Allow_osSetSunParam = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osTeleportOwner = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osWindActiveModelPluginName = true - Allow_osCheckODE = true ; Here for completeness. This function cannot be turned off - - ; ThreatLevel Nuisance - Allow_osSetEstateSunSettings = ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetRegionSunSettings = ESTATE_MANAGER,ESTATE_OWNER - ; ThreatLevel VeryLow - Allow_osEjectFromGroup = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osForceBreakAllLinks = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osForceBreakLink = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetDrawStringSize = true - Allow_osGetWindParam = true - Allow_osInviteToGroup = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osReplaceString = true - Allow_osSetDynamicTextureData = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetDynamicTextureDataBlend = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetDynamicTextureDataBlendFace = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetDynamicTextureURL = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetDynamicTextureURLBlend = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetDynamicTextureURLBlendFace = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetParcelMediaURL = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetParcelSIPAddress = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER + Allow_osEjectFromGroup = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osForceBreakAllLinks = ESTATE_MANAGER,ESTATE_OWNER + Allow_osForceBreakLink = ESTATE_MANAGER,ESTATE_OWNER + Allow_osForceCreateLink = ESTATE_MANAGER,ESTATE_OWNER + Allow_osInviteToGroup = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osSetParcelMediaURL = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osSetParcelSIPAddress = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER Allow_osSetPrimFloatOnWater = true - Allow_osSetWindParam = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osTerrainFlush = ESTATE_MANAGER,ESTATE_OWNER - Allow_osUnixTimeToTimestamp = true - + Allow_osSetWindParam = ESTATE_MANAGER,ESTATE_OWNER + Allow_osTerrainFlush = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + ; ThreatLevel Low - Allow_osAvatarName2Key = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osFormatString = true - Allow_osKey2Name = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osListenRegex = true - Allow_osLoadedCreationDate = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osLoadedCreationID = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osLoadedCreationTime = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osMessageObject = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - Allow_osRegexIsMatch = true - Allow_osGetAvatarHomeURI = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER - + Allow_osDropAttachment = ESTATE_MANAGER,ESTATE_OWNER + Allow_osDropAttachmentAt = ESTATE_MANAGER,ESTATE_OWNER + Allow_osAvatarName2Key = ESTATE_MANAGER,ESTATE_OWNER + Allow_osLoadedCreationDate = ESTATE_MANAGER,ESTATE_OWNER + Allow_osLoadedCreationID = ESTATE_MANAGER,ESTATE_OWNER + Allow_osLoadedCreationTime = ESTATE_MANAGER,ESTATE_OWNER + ; ThreatLevel Moderate - Allow_osDropAttachment = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osDropAttachmentAt = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetGridCustom = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetGridGatekeeperURI = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetGridHomeURI = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetGridLoginURI = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetGridName = true - Allow_osGetGridNick = true - Allow_osGetNumberOfAttachments = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetRegionStats = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetSimulatorMemory = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osMessageAttachments = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetSpeed = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - + Allow_osGetAvatarHomeURI = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetGridCustom = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetGridGatekeeperURI = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetGridHomeURI = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetGridLoginURI = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetSimulatorMemory = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetNumberOfAttachments = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osOwnerSaveAppearance = ESTATE_MANAGER,ESTATE_OWNER + Allow_osMessageAttachments = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osSetSpeed = ESTATE_OWNER,ESTATE_MANAGER,PARCEL_OWNER + ; ThreatLevel High - Allow_osCauseDamage = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osCauseHealing = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osForceAttachToAvatar = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osForceAttachToAvatarFromInventory = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osForceCreateLink = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osForceDropAttachment = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osForceDropAttachmentAt = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetAgentIP = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetLinkPrimitiveParams = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetPhysicsEngineType = true - Allow_osGetPrimitiveParams = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetRegionMapTexture = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetScriptEngineName = true - Allow_osGetSimulatorVersion = true - Allow_osMakeNotecard = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osMatchString = true - Allow_osNpcCreate = ${XEngine|osslNPC} - Allow_osNpcGetPos = ${XEngine|osslNPC} - Allow_osNpcGetRot = ${XEngine|osslNPC} - Allow_osNpcLoadAppearance = ${XEngine|osslNPC} - Allow_osNpcMoveTo = ${XEngine|osslNPC} - Allow_osNpcMoveToTarget = ${XEngine|osslNPC} - Allow_osNpcPlayAnimation = ${XEngine|osslNPC} - Allow_osNpcRemove = ${XEngine|osslNPC} - Allow_osNpcSaveAppearance = ${XEngine|osslNPC} - Allow_osNpcSay = ${XEngine|osslNPC} - Allow_osNpcSetRot = ${XEngine|osslNPC} - Allow_osNpcShout = ${XEngine|osslNPC} - Allow_osNpcSit = ${XEngine|osslNPC} - Allow_osNpcStand = ${XEngine|osslNPC} - Allow_osNpcStopAnimation = ${XEngine|osslNPC} - Allow_osNpcStopMoveToTarget = ${XEngine|osslNPC} - Allow_osNpcTouch = ${XEngine|osslNPC} - Allow_osNpcWhisper = ${XEngine|osslNPC} - Allow_osOwnerSaveAppearance = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER + Allow_osAgentSaveAppearance = ESTATE_OWNER,ESTATE_MANAGER + Allow_osCauseDamage = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osCauseHealing = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osForceAttachToAvatar = ESTATE_MANAGER,ESTATE_OWNER + Allow_osForceAttachToAvatarFromInventory = ESTATE_MANAGER,ESTATE_OWNER + Allow_osForceDetachFromAvatar = ESTATE_MANAGER,ESTATE_OWNER + Allow_osForceDropAttachment = ESTATE_MANAGER,ESTATE_OWNER + Allow_osForceDropAttachmentAt = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetLinkPrimitiveParams = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetPrimitiveParams = ESTATE_MANAGER,ESTATE_OWNER + Allow_osNpcCreate = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcLoadAppearance = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcMoveTo = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcMoveToTarget = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcRemove = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcSaveAppearance = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcSay = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcSetRot = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcShout = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcSit = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcStand = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcStopMoveToTarget = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcPlayAnimation = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcStopAnimation = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcTouch = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER + Allow_osNpcWhisper = PARCEL_OWNER,ESTATE_OWNER,ESTATE_MANAGER Allow_osParcelJoin = ESTATE_MANAGER,ESTATE_OWNER Allow_osParcelSubdivide = ESTATE_MANAGER,ESTATE_OWNER Allow_osRegionRestart = ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetContentType = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetPrimitiveParams = false - Allow_osSetProjectionParams = ${XEngine|osslParcelOG}ESTATE_MANAGER,ESTATE_OWNER + Allow_osSetContentType = ESTATE_MANAGER,ESTATE_OWNER + Allow_osSetEstateSunSettings = ESTATE_MANAGER,ESTATE_OWNER + Allow_osSetParcelDetails = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + Allow_osSetPrimitiveParams = ESTATE_MANAGER,ESTATE_OWNER + Allow_osSetProjectionParams = ESTATE_MANAGER,ESTATE_OWNER Allow_osSetRegionWaterHeight = ESTATE_MANAGER,ESTATE_OWNER + Allow_osSetRegionSunSettings = ESTATE_MANAGER,ESTATE_OWNER Allow_osSetStateEvents = false ; deprecated - Allow_osSetTerrainHeight = ESTATE_MANAGER,ESTATE_OWNER + Allow_osSetTerrainHeight = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER Allow_osSetTerrainTexture = ESTATE_MANAGER,ESTATE_OWNER Allow_osSetTerrainTextureHeight = ESTATE_MANAGER,ESTATE_OWNER - + Allow_osTeleportAgent = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + ; ThreatLevel VeryHigh - Allow_osAgentSaveAppearance = ESTATE_MANAGER,ESTATE_OWNER - ; Warning: The next function allows scripts to force animations on avatars without the user giving permission. - ; Enabling this can allow forced animations which can trigger traumatic episodes in vulnerable populations. - ; Similar things can be said for several of the 'force' functions. Enable with care and control. - ; Some of these were added as early functionality for NPCs. This has been replaced with the NPC functions. - Allow_osAvatarPlayAnimation = false - Allow_osAvatarStopAnimation = false - Allow_osForceDetachFromAvatar = false - Allow_osForceOtherSit = false - ; The notecard functions can cause a lot of load on the region if over used - Allow_osGetNotecard = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetNotecardLine = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osGetNumberOfNotecardLines = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER + Allow_osAvatarPlayAnimation = ESTATE_OWNER,ESTATE_MANAGER,PARCEL_OWNER + Allow_osAvatarStopAnimation = ESTATE_OWNER,ESTATE_MANAGER,PARCEL_OWNER + Allow_osForceOtherSit = ESTATE_MANAGER,ESTATE_OWNER Allow_osRegionNotice = ESTATE_MANAGER,ESTATE_OWNER - Allow_osSetRot = false - Allow_osSetParcelDetails = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - + Allow_osSetRot = ESTATE_MANAGER,ESTATE_OWNER + ; ThreatLevel Severe - Allow_osConsoleCommand = false - Allow_osForceAttachToOtherAvatarFromInventory = false - Allow_osGrantScriptPermissions = false - Allow_osKickAvatar = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - Allow_osRevokeScriptPermissions = false - Allow_osTeleportAgent = ${XEngine|osslParcelO}ESTATE_MANAGER,ESTATE_OWNER - + Allow_osConsoleCommand = ESTATE_OWNER + Allow_osForceAttachToOtherAvatarFromInventory = ESTATE_MANAGER,ESTATE_OWNER + Allow_osGetAgentIP = ESTATE_OWNER + Allow_osKickAvatar = ESTATE_MANAGER,ESTATE_OWNER,PARCEL_OWNER + + + + -- cgit v1.1