<!-- MHonArc v2.4.4 -->
<!--X-Subject: Re: [MUD-Dev] (fwd) Functional Security -->
<!--X-From-R13: [ngg Qunggreyrl <znggNzcp.qla.zy.bet> -->
<!--X-Date: Fri, 20 Mar 1998 08:52:55 +0000 -->
<!--X-Message-Id: Pine.LNX.3.96.980320084547.620D-100000#mpc,dyn.ml.org -->
<!--X-Content-Type: text/plain -->
<!--X-Reference: 199803200015.QAA35503#under,engr.sgi.com -->
<!--X-Head-End-->
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<html>
<head>
<title>MUD-Dev message, Re: [MUD-Dev] (fwd) Functional Security</title>
<!-- meta name="robots" content="noindex,nofollow" -->
<link rev="made" href="mailto:matt#mpc,dyn.ml.org">
</head>
<body background="/backgrounds/paperback.gif" bgcolor="#ffffff"
text="#000000" link="#0000FF" alink="#FF0000" vlink="#006000">
<font size="+4" color="#804040">
<strong><em>MUD-Dev<br>mailing list archive</em></strong>
</font>
<br>
[ <a href="../">Other Periods</a>
| <a href="../../">Other mailing lists</a>
| <a href="/search.php3">Search</a>
]
<br clear=all><hr>
<!--X-Body-Begin-->
<!--X-User-Header-->
<!--X-User-Header-End-->
<!--X-TopPNI-->
Date:
[ <a href="msg00779.html">Previous</a>
| <a href="msg00781.html">Next</a>
]
Thread:
[ <a href="msg00777.html">Previous</a>
| <a href="msg00785.html">Next</a>
]
Index:
[ <A HREF="author.html#00780">Author</A>
| <A HREF="#00780">Date</A>
| <A HREF="thread.html#00780">Thread</A>
]
<!--X-TopPNI-End-->
<!--X-MsgBody-->
<!--X-Subject-Header-Begin-->
<H1>Re: [MUD-Dev] (fwd) Functional Security</H1>
<HR>
<!--X-Subject-Header-End-->
<!--X-Head-of-Message-->
<UL>
<LI><em>To</em>: <A HREF="mailto:mud-dev#null,net">mud-dev#null,net</A></LI>
<LI><em>Subject</em>: Re: [MUD-Dev] (fwd) Functional Security</LI>
<LI><em>From</em>: Matt Chatterley <<A HREF="mailto:matt#mpc,dyn.ml.org">matt#mpc,dyn.ml.org</A>></LI>
<LI><em>Date</em>: Fri, 20 Mar 1998 08:50:13 +0000 (GMT)</LI>
<LI><em>Reply-To</em>: <A HREF="mailto:neddy#itl,net">neddy#itl,net</A></LI>
</UL>
<!--X-Head-of-Message-End-->
<!--X-Head-Body-Sep-Begin-->
<HR>
<!--X-Head-Body-Sep-End-->
<!--X-Body-of-Message-->
<PRE>
On Thu, 19 Mar 1998, J C Lawrence wrote:
> Worth thinking about:
> From: "Scott G. Stewart" <sstewart#or,cadix.com>
> Newsgroups: rec.games.mud.lp
> Subject: Functional Security
> Date: Thu, 19 Mar 1998 14:23:46 -0800
>
Always an interesting matter.
> The few LPC security schemes I have looked at seem to emphasize file
> system security (the ability to read or write a file). Is functional
> security (the ability to invoke a function in an object) downplayed, or
> have I missed something?
It does exist in MudOS, but yes, is often downplayed, it seems. I haven't
gone to any great lengths to change this (the only functions that I have
really secured are those that interface with the FS and other 'sensitive'
parts of the game backbone.
One problem with introducing heavy function-security is that unless you
design it in what appears (to me) a quite cumbersome way, you will cause
problems when you wish unprivaleged objects to interact with each other in
theoretically sensitive ways.
> When I looked at the Lima code, I saw that the monster "die()" function
> had no security.... Does this mean that a "hostile" wizard could create
> an object which calls that function on any given target?
It means that any object can call this function, yes. This is *desirable*.
If you want to create an object, say.. a magical wand, which can utilize a
'death ray' with a 10% chance of killing its target, and 5% chance of
backfiring to kill its wielder - you don't want to kill them by *damage*
because that is not a definite 'kill' and is unpredictable. Thus you use
this function.
> I can imagine a Mud where wizards have creation capability, but compete
> against each other, and are therefore bound by certain rules. In such a
> situation, you would not want one wizard to call the functions in
> another's object.
All my wizards have 'creation capability' and compete to a degree (not in
any game sense - a little more later). This sounds the poster is
describing the wizards being in active competition, as opposed to working
as any sort of buildling team.
On the note of 'wizard games' - a mud based around 'megalomania' or one of
the various spin offs would probably be huge fun. :)
--
Regards,
-Matt Chatterley
Spod: <A HREF="http://user.super.net.uk/~neddy/spod/spod.html">http://user.super.net.uk/~neddy/spod/spod.html</A>
</PRE>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<HR>
<ul compact><li><strong>Follow-Ups</strong>:
<ul>
<li><strong><A NAME="00785" HREF="msg00785.html">Re: [MUD-Dev] (fwd) Functional Security</A></strong>
<ul compact><li><em>From:</em> Miroslav Silovic <silovic#zesoi,fer.hr></li></ul>
</UL></LI></UL>
<!--X-Follow-Ups-End-->
<!--X-References-->
<UL><LI><STRONG>References</STRONG>:
<UL>
<LI><STRONG><A NAME="00776" HREF="msg00776.html">(fwd) Functional Security</A></STRONG>
<UL><LI><EM>From:</EM> J C Lawrence <claw#under,engr.sgi.com></LI></UL></LI>
</UL></LI></UL>
<!--X-References-End-->
<!--X-BotPNI-->
<UL>
<LI>Prev by Date:
<STRONG><A HREF="msg00779.html">Re: [MUD-Dev] Transport layer (UDP vs TCP)</A></STRONG>
</LI>
<LI>Next by Date:
<STRONG><A HREF="msg00781.html">Re: [MUD-Dev] 3D engines for MUDs (was: The MLI Project)</A></STRONG>
</LI>
<LI>Prev by thread:
<STRONG><A HREF="msg00777.html">Re: [MUD-Dev] (fwd) Functional Security</A></STRONG>
</LI>
<LI>Next by thread:
<STRONG><A HREF="msg00785.html">Re: [MUD-Dev] (fwd) Functional Security</A></STRONG>
</LI>
<LI>Index(es):
<UL>
<LI><A HREF="index.html#00780"><STRONG>Date</STRONG></A></LI>
<LI><A HREF="thread.html#00780"><STRONG>Thread</STRONG></A></LI>
</UL>
</LI>
</UL>
<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
<ul><li>Thread context:
<BLOCKQUOTE><UL>
<LI><strong><A NAME="00791" HREF="msg00791.html">Re: [MUD-Dev] (fwd) Functional Security</A></strong>,
Chris Gray <a href="mailto:cg#ami-cg,GraySage.Edmonton.AB.CA">cg#ami-cg,GraySage.Edmonton.AB.CA</a>, Fri 20 Mar 1998, 16:47 GMT
<LI><strong><A NAME="00789" HREF="msg00789.html">Re: [MUD-Dev] (fwd) Functional Security</A></strong>,
Felix A. Croes <a href="mailto:felix#xs1,simplex.nl">felix#xs1,simplex.nl</a>, Fri 20 Mar 1998, 16:40 GMT
<LI><strong><A NAME="00776" HREF="msg00776.html">(fwd) Functional Security</A></strong>,
J C Lawrence <a href="mailto:claw#under,engr.sgi.com">claw#under,engr.sgi.com</a>, Fri 20 Mar 1998, 00:04 GMT
<UL>
<LI><strong><A NAME="00777" HREF="msg00777.html">Re: [MUD-Dev] (fwd) Functional Security</A></strong>,
Ling <a href="mailto:K.L.Lo-94#student,lboro.ac.uk">K.L.Lo-94#student,lboro.ac.uk</a>, Fri 20 Mar 1998, 03:16 GMT
</LI>
<LI><strong><A NAME="00780" HREF="msg00780.html">Re: [MUD-Dev] (fwd) Functional Security</A></strong>,
Matt Chatterley <a href="mailto:matt#mpc,dyn.ml.org">matt#mpc,dyn.ml.org</a>, Fri 20 Mar 1998, 08:52 GMT
<UL>
<LI><strong><A NAME="00785" HREF="msg00785.html">Re: [MUD-Dev] (fwd) Functional Security</A></strong>,
Miroslav Silovic <a href="mailto:silovic#zesoi,fer.hr">silovic#zesoi,fer.hr</a>, Fri 20 Mar 1998, 10:37 GMT
<UL>
<LI><strong><A NAME="00849" HREF="msg00849.html">Re: [MUD-Dev] (fwd) Functional Security</A></strong>,
J C Lawrence <a href="mailto:claw#under,engr.sgi.com">claw#under,engr.sgi.com</a>, Mon 23 Mar 1998, 19:02 GMT
</LI>
</UL>
</LI>
</UL>
</LI>
</UL>
</LI>
<LI><strong><A NAME="00760" HREF="msg00760.html">Re: [MUD-Dev] Transport layer (UDP vs TCP)</A></strong>,
Chris Gray <a href="mailto:cg#ami-cg,GraySage.Edmonton.AB.CA">cg#ami-cg,GraySage.Edmonton.AB.CA</a>, Thu 19 Mar 1998, 01:54 GMT
<LI><strong><A NAME="00759" HREF="msg00759.html">Re: [MUD-Dev] SfD: Clientside Caching</A></strong>,
Chris Gray <a href="mailto:cg#ami-cg,GraySage.Edmonton.AB.CA">cg#ami-cg,GraySage.Edmonton.AB.CA</a>, Thu 19 Mar 1998, 01:54 GMT
</UL></BLOCKQUOTE>
</ul>
<hr>
<center>
[ <a href="../">Other Periods</a>
| <a href="../../">Other mailing lists</a>
| <a href="/search.php3">Search</a>
]
</center>
<hr>
</body>
</html>
