Fella Posted March 15, 2015 Posted March 15, 2015 hey, is it true that console actually has some default password and after using this password it's actually possible to execute all kinds of lua codes via the runcode resource even though user might not even be an admin? wiki says that ability to use the runcode resource should be restricted just to the admin group, but how to actually do that unless it's not done by default?
tosfera Posted March 19, 2015 Posted March 19, 2015 Easy thing to resolve the runcode problem; remove runcode from your resources. Also, disable all the commands in the acl.xml for the user 'console' to revoke all it's rights.
JR10 Posted March 19, 2015 Posted March 19, 2015 Console doesn't have a password. The Console account is only assigned to the console so you can restrict its access if you want to. Runcode is restricted to admins only by default.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now