From c91c24441bb114502f0d49d026cfce0b47045c40 Mon Sep 17 00:00:00 2001 From: Adam Frisby Date: Thu, 9 Apr 2009 13:14:25 +0000 Subject: [PATCH] * Limits MRM scripting to Region Master Avatar only. * This makes MRM scripting ever so slightly more secure. If you have enforced Object Permissions enabled, it may be acceptable to enable MRM within your regions. * Security bug reports on this feature are much appreciated (eg: anyone finding ways around this to execute a MRM as a basic user). --- .../Region/OptionalModules/Scripting/Minimodule/MRMModule.cs | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs b/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs index 71077f20da..910ddea910 100644 --- a/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs +++ b/OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs @@ -73,8 +73,11 @@ namespace OpenSim.Region.OptionalModules.Scripting.Minimodule void EventManager_OnRezScript(uint localID, UUID itemID, string script, int startParam, bool postOnRez, string engine, int stateSource) { - if (script.StartsWith("//MiniMod:C#")) + if (script.StartsWith("//MRM:C#")) { + if(m_scene.GetSceneObjectPart(localID).OwnerID != m_scene.RegionInfo.MasterAvatarAssignedUUID) + return; + try { m_log.Info("[MRM] Found C# MRM");