OpenSim
/
OpenSimMirror
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

* Limits MRM scripting to Region Master Avatar only. 

* This makes MRM scripting ever so slightly more secure. If you have enforced Object Permissions enabled, it may be acceptable to enable MRM within your regions.
* Security bug reports on this feature are much appreciated (eg: anyone finding ways around this to execute a MRM as a basic user).
0.6.5-rc1
Adam Frisby 2009-04-09 13:14:25 +00:00
parent 162dd5c65c
commit c91c24441b
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
OpenSim/Region/OptionalModules/Scripting/Minimodule/MRMModule.cs
View File

@ -73,8 +73,11 @@ namespace OpenSim.Region.OptionalModules.Scripting.Minimodule
void EventManager_OnRezScript(uint localID, UUID itemID, string script, int startParam, bool postOnRez, string engine, int stateSource)
{
if (script.StartsWith("//MiniMod:C#"))
if (script.StartsWith("//MRM:C#"))
{
if(m_scene.GetSceneObjectPart(localID).OwnerID != m_scene.RegionInfo.MasterAvatarAssignedUUID)
return;
try
{
m_log.Info("[MRM] Found C# MRM");