Proposal: Enable ossl functions by default

classic Classic list List threaded Threaded
16 messages Options
Reply | Threaded
Open this post in threaded view
|

Proposal: Enable ossl functions by default

Mister Blue
This email is to start the discussion about enabling the 'ossl' functions by default.

OpenSimulator has many additional LSL scripting functions[1][2]. These functions are never used because they are off by default. Any region operator can enable them but most do not. Since they are not available, OpenSimulator is not as cool as it could be and some necessary scripting is not possible[3].

Why are they off by default? Two reasons: compatibility and security. 'Compatibility' is because some people believe that keeping LSL scripts compatible to SL is important. 'Security' because some of the 'ossl' functions are Really Dangerous and present amazing griefing opportunities.

For 'compatibility' I would suggest those few region operators that care just turn off the 'ossl' functions[4].

For 'security', I am not suggesting turning on all the 'ossl' functions but only enabling the safer ones in all cases and controlling access to the other functions.

The 'ossl' functions are grouped by ThreatLevel[5] which is a rough estimation of how dangerous the function is. 'dangerous' is an evaluation of how much damage the function can do to region operation if used by naive or malicious scripters. Even with the threat levels, the 'ossl' functions can be individually enabled for everyone, parcel or estate owner or member.

I propose to make the following addition to OpenSim.ini[6][7]:
===================BEGIN ADDITION ========================
[XEngine]
   AllowModFunctions = true
   AllowOSFunctions = true
   AllowLightshareFunctions = true

   OSFunctionThreatLevel = VeryLow
   
    ; TreatLevel None
    Allow_OsDrawEllipse =           true
    Allow_OsDrawFilledPolygon =     true
    Allow_OsDrawFilledRectangle =   true
    Allow_OsDrawImage =             true
    Allow_OsDrawLine =              true
    Allow_OsDrawPolygon =           true
    Allow_OsDrawRectangle =         true
    Allow_OsDrawText =              true
    Allow_OsGetAgents =             PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetAvatarList =         PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetCurrentSunHour =     true
    Allow_OsGetHealth =             true
    Allow_OsGetInventoryDesc =      true
    Allow_OsGetMapTexture =         true
    Allow_OsGetRezzingObject =      true
    Allow_OsGetSunParam =           true
    Allow_OsGetTerrainHeight =      true
    Allow_OsIsUUID =                true
    Allow_OsList2Double =           true
    Allow_OsMax =                   true
    Allow_OsMin =                   true
    Allow_OsMovePen =               true
    Allow_OsParseJSON =             true
    Allow_OsParseJSONNew =          true
    Allow_OsSetFontName =           true
    Allow_OsSetFontSize =           true
    Allow_OsSetPenCap =             true
    Allow_OsSetPenColor =           true
    Allow_OsSetPenSize =            true
    Allow_OsSetSunParam =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsTeleportOwner =         true
    Allow_OsWindActiveModelPluginName = true

    ; TreatLevel Nuisance
    Allow_OsSetEstateSunSettings =  ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetRegionSunSettings =  ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel Very Low
    Allow_OsGetDrawStringSize =     true
    Allow_OsGetWindParam =          true
    Allow_OsReplaceString =         true
    Allow_OsSetDynamicTextureData = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureDataBlend =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureDataBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURL =  PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURLBlend =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURLBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelMediaURL =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelSIPAddress =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetPrimFloatOnWater =   true
    Allow_OsSetWindParam =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsTerrainFlush =          ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsUnixTimeToTimestamp =   true

    ; TreatLevel Low
    Allow_OsAvatarName2Key =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsFormatString =          true
    Allow_OsKey2Name =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsListenRegex =           true
    Allow_OsLoadedCreationDate =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsLoadedCreationID =      PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsLoadedCreationTime =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMessageObject =         true
    Allow_OsRegexIsMatch =          true

    ; TreatLevel Moderate
    Allow_OsDropAttachment =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsDropAttachmentAt =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridCustom =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridGatekeeperURI =  PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridHomeURI =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridLoginURI =       PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridName =           true
    Allow_OsGetGridNick =           true
    Allow_OsGetNumberOfAttachments =PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetRegionStats =        PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetSimulatorMemory =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMessageAttachments =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetSpeed =              PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel High
    Allow_OsCauseDamage =           PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsCauseHealing =          PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsForceDropAttachment =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsForceDropAttachmentAt = PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetAgentIP =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetLinkPrimitiveParams =PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetPhysicsEngineType =  true
    Allow_OsGetPrimitiveParams =    true
    Allow_OsGetRegionMapTexture =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetScriptEngineName =   true
    Allow_OsGetSimulatorVersion =   true
    Allow_OsMakeNotecard =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMatchString =           true
    Allow_OsNpcCreate =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcMoveTo =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcPlayAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcRemove =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcSay =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcShout =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcSit =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcStand =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcStopAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcTouch =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcWhisper =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsParcelJoin =            ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsParcelSubdivide =       ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsRegionRestart =         ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetContentType =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetPrimitiveParams =    true
    Allow_OsSetProjectionParams =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetRegionWaterHeight =  ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetStateEvents =        false
    Allow_OsSetTerrainHeight =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel VeryHigh
    Allow_osAvatarPlayAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osAvatarStopAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNotecard =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNotecardLine =       PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNumberOfNotecardLines = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetRegionNotice =       ESTATE_MANAGER,ESTATE_OWNER
    Allow_osSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel Severe
    Allow_osKickAvatar =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osTeleportAgent =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osConsoleCommand =        false
===================END ADDITION ========================

Putting all this in OpenSim.ini will make clear what permissions can be set and what one is giving away.[8]

Well, what do you all think?

== mb

[3] The particular use I'm running up against is vehicle scripts needing to know which physics engine is being used in the region.
[4] Region operators who want SL compatability are most likely people who have built their own configuration file system anyway so they are not using the default OpenSimulator configuration files in any case.
[6] the 'mod' functions are an LSL language extension system that allows new OpenSimulator modules to easily add functions and constants to the scripting language.  See http://opensimulator.org/wiki/OSSL_Script_Library/ModInvoke. Future emails will expound on this feature.
[7] one suggestion is to put this permission list in a new INI file that is included into OpenSim.ini rather than directly into OpenSim.ini.
[8] If a region is selling parcels, some of the PARCEL_* permissions might need removing. A note to this effect could be added.


_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Frank Nichols
I am 100% in favor of this!

Frank

On Apr 10, 2015, at 8:40 AM, Mister Blue <[hidden email]> wrote:

This email is to start the discussion about enabling the 'ossl' functions by default.

OpenSimulator has many additional LSL scripting functions[1][2]. These functions are never used because they are off by default. Any region operator can enable them but most do not. Since they are not available, OpenSimulator is not as cool as it could be and some necessary scripting is not possible[3].

Why are they off by default? Two reasons: compatibility and security. 'Compatibility' is because some people believe that keeping LSL scripts compatible to SL is important. 'Security' because some of the 'ossl' functions are Really Dangerous and present amazing griefing opportunities.

For 'compatibility' I would suggest those few region operators that care just turn off the 'ossl' functions[4].

For 'security', I am not suggesting turning on all the 'ossl' functions but only enabling the safer ones in all cases and controlling access to the other functions.

The 'ossl' functions are grouped by ThreatLevel[5] which is a rough estimation of how dangerous the function is. 'dangerous' is an evaluation of how much damage the function can do to region operation if used by naive or malicious scripters. Even with the threat levels, the 'ossl' functions can be individually enabled for everyone, parcel or estate owner or member.

I propose to make the following addition to OpenSim.ini[6][7]:
===================BEGIN ADDITION ========================
[XEngine]
   AllowModFunctions = true
   AllowOSFunctions = true
   AllowLightshareFunctions = true

   OSFunctionThreatLevel = VeryLow
   
    ; TreatLevel None
    Allow_OsDrawEllipse =           true
    Allow_OsDrawFilledPolygon =     true
    Allow_OsDrawFilledRectangle =   true
    Allow_OsDrawImage =             true
    Allow_OsDrawLine =              true
    Allow_OsDrawPolygon =           true
    Allow_OsDrawRectangle =         true
    Allow_OsDrawText =              true
    Allow_OsGetAgents =             PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetAvatarList =         PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetCurrentSunHour =     true
    Allow_OsGetHealth =             true
    Allow_OsGetInventoryDesc =      true
    Allow_OsGetMapTexture =         true
    Allow_OsGetRezzingObject =      true
    Allow_OsGetSunParam =           true
    Allow_OsGetTerrainHeight =      true
    Allow_OsIsUUID =                true
    Allow_OsList2Double =           true
    Allow_OsMax =                   true
    Allow_OsMin =                   true
    Allow_OsMovePen =               true
    Allow_OsParseJSON =             true
    Allow_OsParseJSONNew =          true
    Allow_OsSetFontName =           true
    Allow_OsSetFontSize =           true
    Allow_OsSetPenCap =             true
    Allow_OsSetPenColor =           true
    Allow_OsSetPenSize =            true
    Allow_OsSetSunParam =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsTeleportOwner =         true
    Allow_OsWindActiveModelPluginName = true

    ; TreatLevel Nuisance
    Allow_OsSetEstateSunSettings =  ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetRegionSunSettings =  ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel Very Low
    Allow_OsGetDrawStringSize =     true
    Allow_OsGetWindParam =          true
    Allow_OsReplaceString =         true
    Allow_OsSetDynamicTextureData = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureDataBlend =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureDataBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURL =  PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURLBlend =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURLBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelMediaURL =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelSIPAddress =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetPrimFloatOnWater =   true
    Allow_OsSetWindParam =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsTerrainFlush =          ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsUnixTimeToTimestamp =   true

    ; TreatLevel Low
    Allow_OsAvatarName2Key =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsFormatString =          true
    Allow_OsKey2Name =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsListenRegex =           true
    Allow_OsLoadedCreationDate =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsLoadedCreationID =      PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsLoadedCreationTime =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMessageObject =         true
    Allow_OsRegexIsMatch =          true

    ; TreatLevel Moderate
    Allow_OsDropAttachment =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsDropAttachmentAt =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridCustom =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridGatekeeperURI =  PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridHomeURI =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridLoginURI =       PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridName =           true
    Allow_OsGetGridNick =           true
    Allow_OsGetNumberOfAttachments =PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetRegionStats =        PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetSimulatorMemory =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMessageAttachments =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetSpeed =              PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel High
    Allow_OsCauseDamage =           PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsCauseHealing =          PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsForceDropAttachment =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsForceDropAttachmentAt = PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetAgentIP =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetLinkPrimitiveParams =PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetPhysicsEngineType =  true
    Allow_OsGetPrimitiveParams =    true
    Allow_OsGetRegionMapTexture =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetScriptEngineName =   true
    Allow_OsGetSimulatorVersion =   true
    Allow_OsMakeNotecard =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMatchString =           true
    Allow_OsNpcCreate =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcMoveTo =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcPlayAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcRemove =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcSay =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcShout =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcSit =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcStand =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcStopAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcTouch =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcWhisper =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsParcelJoin =            ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsParcelSubdivide =       ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsRegionRestart =         ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetContentType =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetPrimitiveParams =    true
    Allow_OsSetProjectionParams =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetRegionWaterHeight =  ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetStateEvents =        false
    Allow_OsSetTerrainHeight =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel VeryHigh
    Allow_osAvatarPlayAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osAvatarStopAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNotecard =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNotecardLine =       PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNumberOfNotecardLines = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetRegionNotice =       ESTATE_MANAGER,ESTATE_OWNER
    Allow_osSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel Severe
    Allow_osKickAvatar =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osTeleportAgent =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osConsoleCommand =        false
===================END ADDITION ========================

Putting all this in OpenSim.ini will make clear what permissions can be set and what one is giving away.[8]

Well, what do you all think?

== mb

[3] The particular use I'm running up against is vehicle scripts needing to know which physics engine is being used in the region.
[4] Region operators who want SL compatability are most likely people who have built their own configuration file system anyway so they are not using the default OpenSimulator configuration files in any case.
[6] the 'mod' functions are an LSL language extension system that allows new OpenSimulator modules to easily add functions and constants to the scripting language.  See http://opensimulator.org/wiki/OSSL_Script_Library/ModInvoke. Future emails will expound on this feature.
[7] one suggestion is to put this permission list in a new INI file that is included into OpenSim.ini rather than directly into OpenSim.ini.
[8] If a region is selling parcels, some of the PARCEL_* permissions might need removing. A note to this effect could be added.

_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev


_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Ai Austin-2
In reply to this post by Mister Blue
Mister Blue wrote:
>[3] The particular use I'm running up against is vehicle scripts needing to
>know which physics engine is being used in the region.

Perhaps this might argue for this being in a lower level that is on
by default... is just knowing the physics engine the threat or
something you can do when you know the engine?

I think a careful consideration of all the functions to asses which
are at various clear threat levels, and then setting one threat level
as the default would be good.

>[7] one suggestion is to put this permission list in a new INI file that is
>included into OpenSim.ini rather than directly into OpenSim.ini.

I think that makes sense.. as its a long list.

bin/addon-modules...

While we are looking at this... there seems to be an old
bin/addon-modules directory whose read me indicates that any .ini
file in there is "picked up automatically".  Is this actually the
case? If so I assume its just to OpenSim.exe not Robust.exe?  And if
so why is it named addon-modules that than config-includes. Does any
addon actually use it?  It at least ought to be made clear in the
README that its for OpenSim.ini rather than potentially confusing
this with Robust.[HG.].ini possible inclusion.

_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Michael Emory Cerquoni
In reply to this post by Frank Nichols
+1 from me as well

On Fri, Apr 10, 2015 at 9:32 AM, Frank Nichols <[hidden email]> wrote:
I am 100% in favor of this!

Frank

On Apr 10, 2015, at 8:40 AM, Mister Blue <[hidden email]> wrote:

This email is to start the discussion about enabling the 'ossl' functions by default.

OpenSimulator has many additional LSL scripting functions[1][2]. These functions are never used because they are off by default. Any region operator can enable them but most do not. Since they are not available, OpenSimulator is not as cool as it could be and some necessary scripting is not possible[3].

Why are they off by default? Two reasons: compatibility and security. 'Compatibility' is because some people believe that keeping LSL scripts compatible to SL is important. 'Security' because some of the 'ossl' functions are Really Dangerous and present amazing griefing opportunities.

For 'compatibility' I would suggest those few region operators that care just turn off the 'ossl' functions[4].

For 'security', I am not suggesting turning on all the 'ossl' functions but only enabling the safer ones in all cases and controlling access to the other functions.

The 'ossl' functions are grouped by ThreatLevel[5] which is a rough estimation of how dangerous the function is. 'dangerous' is an evaluation of how much damage the function can do to region operation if used by naive or malicious scripters. Even with the threat levels, the 'ossl' functions can be individually enabled for everyone, parcel or estate owner or member.

I propose to make the following addition to OpenSim.ini[6][7]:
===================BEGIN ADDITION ========================
[XEngine]
   AllowModFunctions = true
   AllowOSFunctions = true
   AllowLightshareFunctions = true

   OSFunctionThreatLevel = VeryLow
   
    ; TreatLevel None
    Allow_OsDrawEllipse =           true
    Allow_OsDrawFilledPolygon =     true
    Allow_OsDrawFilledRectangle =   true
    Allow_OsDrawImage =             true
    Allow_OsDrawLine =              true
    Allow_OsDrawPolygon =           true
    Allow_OsDrawRectangle =         true
    Allow_OsDrawText =              true
    Allow_OsGetAgents =             PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetAvatarList =         PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetCurrentSunHour =     true
    Allow_OsGetHealth =             true
    Allow_OsGetInventoryDesc =      true
    Allow_OsGetMapTexture =         true
    Allow_OsGetRezzingObject =      true
    Allow_OsGetSunParam =           true
    Allow_OsGetTerrainHeight =      true
    Allow_OsIsUUID =                true
    Allow_OsList2Double =           true
    Allow_OsMax =                   true
    Allow_OsMin =                   true
    Allow_OsMovePen =               true
    Allow_OsParseJSON =             true
    Allow_OsParseJSONNew =          true
    Allow_OsSetFontName =           true
    Allow_OsSetFontSize =           true
    Allow_OsSetPenCap =             true
    Allow_OsSetPenColor =           true
    Allow_OsSetPenSize =            true
    Allow_OsSetSunParam =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsTeleportOwner =         true
    Allow_OsWindActiveModelPluginName = true

    ; TreatLevel Nuisance
    Allow_OsSetEstateSunSettings =  ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetRegionSunSettings =  ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel Very Low
    Allow_OsGetDrawStringSize =     true
    Allow_OsGetWindParam =          true
    Allow_OsReplaceString =         true
    Allow_OsSetDynamicTextureData = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureDataBlend =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureDataBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURL =  PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURLBlend =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetDynamicTextureURLBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelMediaURL =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelSIPAddress =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetPrimFloatOnWater =   true
    Allow_OsSetWindParam =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsTerrainFlush =          ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsUnixTimeToTimestamp =   true

    ; TreatLevel Low
    Allow_OsAvatarName2Key =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsFormatString =          true
    Allow_OsKey2Name =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsListenRegex =           true
    Allow_OsLoadedCreationDate =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsLoadedCreationID =      PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsLoadedCreationTime =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMessageObject =         true
    Allow_OsRegexIsMatch =          true

    ; TreatLevel Moderate
    Allow_OsDropAttachment =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsDropAttachmentAt =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridCustom =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridGatekeeperURI =  PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridHomeURI =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridLoginURI =       PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetGridName =           true
    Allow_OsGetGridNick =           true
    Allow_OsGetNumberOfAttachments =PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetRegionStats =        PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetSimulatorMemory =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMessageAttachments =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetSpeed =              PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel High
    Allow_OsCauseDamage =           PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsCauseHealing =          PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsForceDropAttachment =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsForceDropAttachmentAt = PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetAgentIP =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetLinkPrimitiveParams =PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetPhysicsEngineType =  true
    Allow_OsGetPrimitiveParams =    true
    Allow_OsGetRegionMapTexture =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsGetScriptEngineName =   true
    Allow_OsGetSimulatorVersion =   true
    Allow_OsMakeNotecard =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsMatchString =           true
    Allow_OsNpcCreate =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcMoveTo =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcPlayAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcRemove =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcSay =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcShout =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcSit =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcStand =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcStopAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcTouch =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsNpcWhisper =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsParcelJoin =            ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsParcelSubdivide =       ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsRegionRestart =         ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetContentType =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetPrimitiveParams =    true
    Allow_OsSetProjectionParams =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetRegionWaterHeight =  ESTATE_MANAGER,ESTATE_OWNER
    Allow_OsSetStateEvents =        false
    Allow_OsSetTerrainHeight =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel VeryHigh
    Allow_osAvatarPlayAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osAvatarStopAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNotecard =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNotecardLine =       PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetNumberOfNotecardLines = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osGetRegionNotice =       ESTATE_MANAGER,ESTATE_OWNER
    Allow_osSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER

    ; TreatLevel Severe
    Allow_osKickAvatar =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osTeleportAgent =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
    Allow_osConsoleCommand =        false
===================END ADDITION ========================

Putting all this in OpenSim.ini will make clear what permissions can be set and what one is giving away.[8]

Well, what do you all think?

== mb

[3] The particular use I'm running up against is vehicle scripts needing to know which physics engine is being used in the region.
[4] Region operators who want SL compatability are most likely people who have built their own configuration file system anyway so they are not using the default OpenSimulator configuration files in any case.
[6] the 'mod' functions are an LSL language extension system that allows new OpenSimulator modules to easily add functions and constants to the scripting language.  See http://opensimulator.org/wiki/OSSL_Script_Library/ModInvoke. Future emails will expound on this feature.
[7] one suggestion is to put this permission list in a new INI file that is included into OpenSim.ini rather than directly into OpenSim.ini.
[8] If a region is selling parcels, some of the PARCEL_* permissions might need removing. A note to this effect could be added.

_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev


_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev




--
Michael Emory Cerquoni

_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Melanie-2
In reply to this post by Frank Nichols
Hi,

as everyone knows I'm against changing defaults. That said, I
believe the below clarifications and default configurations are a
good thing to add, with the following changes:

Functions that are useful for griefing should not be permitted for
parcel owners but only region admins/owners. This would prevent
blatant abuse potential when people rent land in grids like osgrid.
Yes, that actually happens!

The main allow ossl flag should remain off by default in order to
preserve existing behavior, However, the first run dialog could be
extended to ask the user if he wants to activate it.

When proposing a defaults change, please remember that most OpenSim
users do NOT follow this list.

On 10/04/2015 15:32, Frank Nichols wrote:

> I am 100% in favor of this!
>
> Frank
>
>> On Apr 10, 2015, at 8:40 AM, Mister Blue <[hidden email]> wrote:
>>
>> This email is to start the discussion about enabling the 'ossl' functions by default.
>>
>> OpenSimulator has many additional LSL scripting functions[1][2]. These functions are never used because they are off by default. Any region operator can enable them but most do not. Since they are not available, OpenSimulator is not as cool as it could be and some necessary scripting is not possible[3].
>>
>> Why are they off by default? Two reasons: compatibility and security. 'Compatibility' is because some people believe that keeping LSL scripts compatible to SL is important. 'Security' because some of the 'ossl' functions are Really Dangerous and present amazing griefing opportunities.
>>
>> For 'compatibility' I would suggest those few region operators that care just turn off the 'ossl' functions[4].
>>
>> For 'security', I am not suggesting turning on all the 'ossl' functions but only enabling the safer ones in all cases and controlling access to the other functions.
>>
>> The 'ossl' functions are grouped by ThreatLevel[5] which is a rough estimation of how dangerous the function is. 'dangerous' is an evaluation of how much damage the function can do to region operation if used by naive or malicious scripters. Even with the threat levels, the 'ossl' functions can be individually enabled for everyone, parcel or estate owner or member.
>>
>> I propose to make the following addition to OpenSim.ini[6][7]:
>> ===================BEGIN ADDITION ========================
>> [XEngine]
>>    AllowModFunctions = true
>>    AllowOSFunctions = true
>>    AllowLightshareFunctions = true
>>
>>    OSFunctionThreatLevel = VeryLow
>>    
>>     ; TreatLevel None
>>     Allow_OsDrawEllipse =           true
>>     Allow_OsDrawFilledPolygon =     true
>>     Allow_OsDrawFilledRectangle =   true
>>     Allow_OsDrawImage =             true
>>     Allow_OsDrawLine =              true
>>     Allow_OsDrawPolygon =           true
>>     Allow_OsDrawRectangle =         true
>>     Allow_OsDrawText =              true
>>     Allow_OsGetAgents =             PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetAvatarList =         PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetCurrentSunHour =     true
>>     Allow_OsGetHealth =             true
>>     Allow_OsGetInventoryDesc =      true
>>     Allow_OsGetMapTexture =         true
>>     Allow_OsGetRezzingObject =      true
>>     Allow_OsGetSunParam =           true
>>     Allow_OsGetTerrainHeight =      true
>>     Allow_OsIsUUID =                true
>>     Allow_OsList2Double =           true
>>     Allow_OsMax =                   true
>>     Allow_OsMin =                   true
>>     Allow_OsMovePen =               true
>>     Allow_OsParseJSON =             true
>>     Allow_OsParseJSONNew =          true
>>     Allow_OsSetFontName =           true
>>     Allow_OsSetFontSize =           true
>>     Allow_OsSetPenCap =             true
>>     Allow_OsSetPenColor =           true
>>     Allow_OsSetPenSize =            true
>>     Allow_OsSetSunParam =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsTeleportOwner =         true
>>     Allow_OsWindActiveModelPluginName = true
>>
>>     ; TreatLevel Nuisance
>>     Allow_OsSetEstateSunSettings =  ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetRegionSunSettings =  ESTATE_MANAGER,ESTATE_OWNER
>>
>>     ; TreatLevel Very Low
>>     Allow_OsGetDrawStringSize =     true
>>     Allow_OsGetWindParam =          true
>>     Allow_OsReplaceString =         true
>>     Allow_OsSetDynamicTextureData = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetDynamicTextureDataBlend =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetDynamicTextureDataBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetDynamicTextureURL =  PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetDynamicTextureURLBlend =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetDynamicTextureURLBlendFace = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetParcelMediaURL =     PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetParcelSIPAddress =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetPrimFloatOnWater =   true
>>     Allow_OsSetWindParam =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsTerrainFlush =          ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsUnixTimeToTimestamp =   true
>>
>>     ; TreatLevel Low
>>     Allow_OsAvatarName2Key =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsFormatString =          true
>>     Allow_OsKey2Name =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsListenRegex =           true
>>     Allow_OsLoadedCreationDate =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsLoadedCreationID =      PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsLoadedCreationTime =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsMessageObject =         true
>>     Allow_OsRegexIsMatch =          true
>>
>>     ; TreatLevel Moderate
>>     Allow_OsDropAttachment =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsDropAttachmentAt =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetGridCustom =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetGridGatekeeperURI =  PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetGridHomeURI =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetGridLoginURI =       PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetGridName =           true
>>     Allow_OsGetGridNick =           true
>>     Allow_OsGetNumberOfAttachments =PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetRegionStats =        PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetSimulatorMemory =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsMessageAttachments =    PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetSpeed =              PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>
>>     ; TreatLevel High
>>     Allow_OsCauseDamage =           PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsCauseHealing =          PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsForceDropAttachment =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsForceDropAttachmentAt = PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetAgentIP =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetLinkPrimitiveParams =PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetPhysicsEngineType =  true
>>     Allow_OsGetPrimitiveParams =    true
>>     Allow_OsGetRegionMapTexture =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsGetScriptEngineName =   true
>>     Allow_OsGetSimulatorVersion =   true
>>     Allow_OsMakeNotecard =          PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsMatchString =           true
>>     Allow_OsNpcCreate =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcMoveTo =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcPlayAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcRemove =             PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcSay =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcShout =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcSit =                PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcStand =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcStopAnimation =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcTouch =              PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsNpcWhisper =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsParcelJoin =            ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsParcelSubdivide =       ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsRegionRestart =         ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetContentType =        PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetPrimitiveParams =    true
>>     Allow_OsSetProjectionParams =   PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetRegionWaterHeight =  ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_OsSetStateEvents =        false
>>     Allow_OsSetTerrainHeight =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>
>>     ; TreatLevel VeryHigh
>>     Allow_osAvatarPlayAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osAvatarStopAnimation =   PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osGetNotecard =           PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osGetNotecardLine =       PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osGetNumberOfNotecardLines = PARCEL_GROUP_MEMBER,PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osGetRegionNotice =       ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osSetParcelDetails =      PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>
>>     ; TreatLevel Severe
>>     Allow_osKickAvatar =            PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osTeleportAgent =         PARCEL_OWNER,ESTATE_MANAGER,ESTATE_OWNER
>>     Allow_osConsoleCommand =        false
>> ===================END ADDITION ========================
>>
>> Putting all this in OpenSim.ini will make clear what permissions can be set and what one is giving away.[8]
>>
>> Well, what do you all think?
>>
>> == mb
>>
>> [1] http://opensimulator.org/wiki/OSSL <http://opensimulator.org/wiki/OSSL>
>> [2] http://opensimulator.org/wiki/Category:OSSL_Functions <http://opensimulator.org/wiki/Category:OSSL_Functions>
>> [3] The particular use I'm running up against is vehicle scripts needing to know which physics engine is being used in the region.
>> [4] Region operators who want SL compatability are most likely people who have built their own configuration file system anyway so they are not using the default OpenSimulator configuration files in any case.
>> [5] http://opensimulator.org/wiki/Threat_level <http://opensimulator.org/wiki/Threat_level>
>> [6] the 'mod' functions are an LSL language extension system that allows new OpenSimulator modules to easily add functions and constants to the scripting language.  See http://opensimulator.org/wiki/OSSL_Script_Library/ModInvoke <http://opensimulator.org/wiki/OSSL_Script_Library/ModInvoke>. Future emails will expound on this feature.
>> [7] one suggestion is to put this permission list in a new INI file that is included into OpenSim.ini rather than directly into OpenSim.ini.
>> [8] If a region is selling parcels, some of the PARCEL_* permissions might need removing. A note to this effect could be added.
>>
>> _______________________________________________
>> Opensim-dev mailing list
>> [hidden email]
>> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
>
>
>
>
>
> _______________________________________________
> Opensim-dev mailing list
> [hidden email]
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Aine
In reply to this post by Mister Blue
I am strongly in favour of this change but I concur with Melanie about
limiting access to the higher thread level functions. I would suggest
that a reasonable approach to *default* values would be:

Severe = ESTATE_OWNER
VeryHigh = ESTATE_OWNER, ESTATE_MANAGER
High - ESTATE_OWNER, ESTATE_MANAGER, PARCEL_OWNER
and the others as per Mister Blue's list

I have suggested in the past that adding  a mechanism to allow setting
something like "Allow_osThreatLevelSevere = xxx" as a valid ini entry
which would make it considerably easier for most grid managers to
implement and more easily accommodate new functions as they're added
(assuming they're correctly categorized).

I see no reason at all to disable OSSL by default since it doesn't
*prevent* or interfere with any expected behaviour.

As Fred pointed out, the list Mister Blue supplied would fail because
functions are cases sensitive.

Also missing from the list :

Allow_osForceOtherSit
also I think there was a bounded terrain manipulation function added
last summer that isn't in the list and appears also not to be documented
in the wiki (or if it is, I can't see it)
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Melanie-2
Hi,

On 10/04/2015 20:03, Aine wrote:
> I see no reason at all to disable OSSL by default since it doesn't
> *prevent* or interfere with any expected behaviour.

The reason is that many people allow outside users in their regions
and are used to the kind of mischief they are capable of.

Updating without knowing these functions are now active by default
would expose them to significant nuisances and risks.

- Melanie
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Frank Nichols
So, “many” people allow “outsiders” to create and run scripts in their regions?

Even without these functions enabled, that seems to be a recipe for disaster.

Frank

> On Apr 10, 2015, at 2:51 PM, Melanie <[hidden email]> wrote:
>
> Hi,
>
> On 10/04/2015 20:03, Aine wrote:
>> I see no reason at all to disable OSSL by default since it doesn't
>> *prevent* or interfere with any expected behaviour.
>
> The reason is that many people allow outside users in their regions
> and are used to the kind of mischief they are capable of.
>
> Updating without knowing these functions are now active by default
> would expose them to significant nuisances and risks.
>
> - Melanie
> _______________________________________________
> Opensim-dev mailing list
> [hidden email]
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev

_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Shaun T. Erickson
In reply to this post by Melanie-2
On 4/10/15 2:51 PM, Melanie wrote:

> Hi,
>
> On 10/04/2015 20:03, Aine wrote:
>> I see no reason at all to disable OSSL by default since it doesn't
>> *prevent* or interfere with any expected behaviour.
> The reason is that many people allow outside users in their regions
> and are used to the kind of mischief they are capable of.
>
> Updating without knowing these functions are now active by default
> would expose them to significant nuisances and risks.

Only if they are so foolish as to not check for changes in the settings
when they update.
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Shaun T. Erickson
On 4/10/15 6:14 PM, Shaun T. Erickson wrote:

> On 4/10/15 2:51 PM, Melanie wrote:
>> Hi,
>>
>> On 10/04/2015 20:03, Aine wrote:
>>> I see no reason at all to disable OSSL by default since it doesn't
>>> *prevent* or interfere with any expected behaviour.
>> The reason is that many people allow outside users in their regions
>> and are used to the kind of mischief they are capable of.
>>
>> Updating without knowing these functions are now active by default
>> would expose them to significant nuisances and risks.
>
> Only if they are so foolish as to not check for changes in the
> settings when they update.
By the way, would people please spell "threat" correctly? It's not
"treat" or "thread" as I've seen some people use.

Thanks,

Spelling Nazi. :)
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Mister Blue
Great discussion! My main point is that, with ossl functions off by default, no scripter will ever use an ossl function. That is an amazing waste of all the awesomeness that OpenSimulator can be. OpenSimulator is a modular, extensible platform to create virtual world amazing things and not just a SL clone.

So far, I have seen three themes in the discussion:
   1) turning on by default might surprise a region operator who didn't want the ossl functions enabled;
   2) embedding all that INI stuff in OpenSim.ini is ugly and a separate file is a better solution; and
   3) my example permissions list (besides having case problems and missing functions) gave  too much
           permission to parcel owners and parcel group members.

To move the discussion along, I've checked into opensim/master, the file bin/osslEnable.ini which incorporates Fred Beckhusen's excellent, complete list of ossl functions as well as restricting (and making optional) the use by parcel owners and group members.

This does not enable the ossl functions by default. The addition of an 'include' in OpenSim.ini would do that.

== mb

On Fri, Apr 10, 2015 at 3:20 PM, Shaun T. Erickson <[hidden email]> wrote:
On 4/10/15 6:14 PM, Shaun T. Erickson wrote:
On 4/10/15 2:51 PM, Melanie wrote:
Hi,

On 10/04/2015 20:03, Aine wrote:
I see no reason at all to disable OSSL by default since it doesn't
*prevent* or interfere with any expected behaviour.
The reason is that many people allow outside users in their regions
and are used to the kind of mischief they are capable of.

Updating without knowing these functions are now active by default
would expose them to significant nuisances and risks.

Only if they are so foolish as to not check for changes in the settings when they update.
By the way, would people please spell "threat" correctly? It's not "treat" or "thread" as I've seen some people use.

Thanks,

Spelling Nazi. :)

_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev


_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Ai Austin-2
In reply to this post by Mister Blue
At 13:00 12/04/2015, [hidden email] wrote:
>To move the discussion along, I've checked into opensim/master, the
>file bin/osslEnable.ini


Mister Blue... fro consistency, I think that ought to be placed in
bin/config-include not bin top level.

We are still at alpha stage (as JustinCC keeps reminding us :-) ) and
this is the time to look at what makes most sense.  I agree with you
that the functions ought to be enabled by default... and the
discussion should shift to WHICH functions and levels are on by default.

While discussions continue, would it be worth adding in the include
line now commented out?  Then we all have it in the same place and
some of us can enable it for testing against our various differently
manually set up OSSL environments and see what breaks to give
feedback on the specific default set of permissions?


_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Melanie-2
I think that is a good idea, both moving the file and adding the
include line already. It serves consistency ad ease of use.

- Melanie

On 12/04/2015 16:56, Ai Austin wrote:

> At 13:00 12/04/2015, [hidden email] wrote:
>>To move the discussion along, I've checked into opensim/master, the
>>file bin/osslEnable.ini
>
>
> Mister Blue... fro consistency, I think that ought to be placed in
> bin/config-include not bin top level.
>
> We are still at alpha stage (as JustinCC keeps reminding us :-) ) and
> this is the time to look at what makes most sense.  I agree with you
> that the functions ought to be enabled by default... and the
> discussion should shift to WHICH functions and levels are on by default.
>
> While discussions continue, would it be worth adding in the include
> line now commented out?  Then we all have it in the same place and
> some of us can enable it for testing against our various differently
> manually set up OSSL environments and see what breaks to give
> feedback on the specific default set of permissions?
>
>
> _______________________________________________
> Opensim-dev mailing list
> [hidden email]
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
>
>
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

Zadark Portal
I support OSSL enable functions by default.

I also see a need to promote simulator operators awareness that OSSL status has changed. To address this issue I suggest extending console message 'INITIALIZATION COMPLETE FOR [name]  .. to include SCRIPT EXTENSIONS (OSSL) ENABLED. or some such...


On 12 April 2015 at 16:11, Melanie <[hidden email]> wrote:
I think that is a good idea, both moving the file and adding the
include line already. It serves consistency ad ease of use.

- Melanie

On 12/04/2015 16:56, Ai Austin wrote:
> At 13:00 12/04/2015, [hidden email] wrote:
>>To move the discussion along, I've checked into opensim/master, the
>>file bin/osslEnable.ini
>
>
> Mister Blue... fro consistency, I think that ought to be placed in
> bin/config-include not bin top level.
>
> We are still at alpha stage (as JustinCC keeps reminding us :-) ) and
> this is the time to look at what makes most sense.  I agree with you
> that the functions ought to be enabled by default... and the
> discussion should shift to WHICH functions and levels are on by default.
>
> While discussions continue, would it be worth adding in the include
> line now commented out?  Then we all have it in the same place and
> some of us can enable it for testing against our various differently
> manually set up OSSL environments and see what breaks to give
> feedback on the specific default set of permissions?
>
>
> _______________________________________________
> Opensim-dev mailing list
> [hidden email]
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
>
>
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev


_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Rép. : Proposal: Enable ossl functions by default

Michel Beauregard
In reply to this post by Mister Blue
A user suggestion:

For new comers treatlevel is something impressive using veryLow is reassuring .
reference to http://opensimulator.org/wiki/Threat_level help dimistify that after your familiarized  with OSL as an option.

I suggesting  not to drop the idea of making this OSL addition you propose as  an include commenting it in our out as appropriate for three reasons:

-keep opensim.ini as simple as possible (understandable for new comers)
-compatibility with actual (leave default as is)
-showing modularity of ini chain of includes  as a configuration tool

I would suggest that include would fit well after  gridCommun.ini

I think OSL is a great advantage of OpenSim.
Diva used to allow treatLevel veryHigh for a long while. (0.7.+)

hope this comment help your work sir.
gimisa

--------------------------------------------
En date de : Ven, 10.4.15, Mister Blue <[hidden email]> a écrit :

 Objet : [Opensim-dev] Proposal: Enable ossl functions by default
 À : "opensim-dev" <[hidden email]>
 Date: vendredi 10 avril 2015 08 h 40
 
 This email is to
 start the discussion about enabling the 'ossl'
 functions by default.
 OpenSimulator has many additional LSL scripting

_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
Reply | Threaded
Open this post in threaded view
|

Re: Proposal: Enable ossl functions by default

David Saunders-2
In reply to this post by Zadark Portal
Hey, 

 Our grid has another script engine enabled by default, and we promote that we have OS functions enabled. I found scripters who move to os grids expect to have some of the OS functions enabled.   And having them enabled or not enabled will not affect a imported script from SL to work. Just use of OS functions can enhance a script if they decide to alter it. 

Well we OS Dev seams to expect people to read the ini the first time to configure the more advance features.  Personally I always turned on the OS function and set the threat level to allow all functions on my sandbox. 

 We did modify the NPC code some so you could tell it was NPC and not another avatar.  and block the ability to copy another avatar appearance.  The build is security for things like osteleportagent  work for us. 

  There are other little things that may cause issues, but it seams to change from day to day what are the issues. I think we have more issues with rouge SL scripts then miss use of OS functions. 

But still, every grid will have there requirements to block or not to block certain functions. The way they been doing it works for me. I will delve into the code to find the default and lot of time I will find why they feel it should be listed at that level.   Then I would discuss with others if we want to use it or not.   I would love to see a page or more explanation in the os function description to explain why it was rated at the level they put it at :)  

I do know alot of functions are move to higher threat because they may cause undo load of the simulator.  Which is good to know too.  

My rule of thumb on extra functions is "Don't give more power then they already have". Meaning most functions that simulate estate/region setting or parcel setting only the parcel/region/estate owners can change (would love to be able to let manages also) 
Another thing we have throttled some  os functions down is the same way SL puts pauses and limitations on there functions. 

Also, I am always looking at if we should allow and not allow functions And I have scripters ask my why we don't have this or that, and allot of time I turn it on for them. It as quick as changing a line and restart a sim to have it working for them and evenly the whole grid as it restarts over time.  

That how I let it flow, our small grid hitting 1000 mark in members and that how we run it relaxing and laid back.  We constantly trying to improve the environment and add more bells and whistles. They are happy and content with how things are running.  We biggest problems we have is physics is not up to the level as SL yet.   Not in how the scripts run

On Mon, Apr 13, 2015 at 2:34 AM, Zadark Portal <[hidden email]> wrote:
I support OSSL enable functions by default.

I also see a need to promote simulator operators awareness that OSSL status has changed. To address this issue I suggest extending console message 'INITIALIZATION COMPLETE FOR [name]  .. to include SCRIPT EXTENSIONS (OSSL) ENABLED. or some such...


On 12 April 2015 at 16:11, Melanie <[hidden email]> wrote:
I think that is a good idea, both moving the file and adding the
include line already. It serves consistency ad ease of use.

- Melanie

On 12/04/2015 16:56, Ai Austin wrote:
> At 13:00 12/04/2015, [hidden email] wrote:
>>To move the discussion along, I've checked into opensim/master, the
>>file bin/osslEnable.ini
>
>
> Mister Blue... fro consistency, I think that ought to be placed in
> bin/config-include not bin top level.
>
> We are still at alpha stage (as JustinCC keeps reminding us :-) ) and
> this is the time to look at what makes most sense.  I agree with you
> that the functions ought to be enabled by default... and the
> discussion should shift to WHICH functions and levels are on by default.
>
> While discussions continue, would it be worth adding in the include
> line now commented out?  Then we all have it in the same place and
> some of us can enable it for testing against our various differently
> manually set up OSSL environments and see what breaks to give
> feedback on the specific default set of permissions?
>
>
> _______________________________________________
> Opensim-dev mailing list
> [hidden email]
> http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev
>
>
_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev


_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev



_______________________________________________
Opensim-dev mailing list
[hidden email]
http://opensimulator.org/cgi-bin/mailman/listinfo/opensim-dev