Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a disabled-by-default CfgRemoteExec #188

Open
dijksterhuis opened this issue Oct 18, 2024 · 1 comment
Open

Add a disabled-by-default CfgRemoteExec #188

dijksterhuis opened this issue Oct 18, 2024 · 1 comment
Labels
enhancement New feature or request

Comments

@dijksterhuis
Copy link
Contributor

Publicly hosted servers can be vulnerable to a number of exploits techniques.

For those unaware, CfgRemoteExec blocks clients from being able to execute any commands or functions server side, unless said commands or functions have been specifically whitelisted in the config.

I know of at least three incidents on publicly playable servers where this would have been useful to mitigate malicious behaviour by some players.

Will set this up to be off by default, as it can cause issues with certain mods. That way privately hosted servers (probably the large majority of community Mike Force usage) will be unaffected.

@dijksterhuis dijksterhuis added the enhancement New feature or request label Oct 18, 2024
@dijksterhuis dijksterhuis changed the title Add an off by default CfgRemoteExec Add an disabled-by-default CfgRemoteExec Oct 18, 2024
@dijksterhuis dijksterhuis changed the title Add an disabled-by-default CfgRemoteExec Add a disabled-by-default CfgRemoteExec Oct 18, 2024
@dijksterhuis
Copy link
Contributor Author

One issue with this is Zeus/Curators.

From what i can tell, Zeus initialisation during server start up uses BIS_fnc_MP, which means BIS_fnc_call has to be whitelisted in the remoteExec functions for Zeus-ing to work.

It was a week or more ago that i looked through Zeus init. So i might be misremembering the relationship between MP/call.

Regardless, in my local testing we have to whitelist BIS_fnc_call to get zeusing to work.

so will be adding a detailed note about this in the config file.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant