Blocked file types

[eirsik]

Hi guys, I have a question about restricted files.

 

A few CSGO mods rely on .so and .dll files. But these are by recommendation restricted so it's not possible to upload those to the server.

I noticed they are also blocked whne using the Mod manager to install mods.

 

My question is, I have seen providers who allow these files, and I was wondering, what you guys recommend?

Should these files be restricted or should I allow those files?

 

Thanks guys!

[Alexr03]

Well for us we allow the .dll formats to be uploaded by FTP, File Manager, etc. We haven't seen any security leaks this is probably because the game servers we run are ran under the TCAGame user account so the DLL can't install software outside etc.

[gijs007]

It's a potential security risk, since users can upload custom code to their server which will then be executed.

 

Normally this code is executed as TCAGame, which is a shared user account for all game servers. This means they could access other client's files by upload custom code.

 

If you use User Per Service permissions you won't have that risk.

However someone could still upload custom code which abuses your server in other ways (e.g. sending spam mails or launching DoS attacks).

 

It's also possible that the custom code exploit a Windows bugs, which could for example escalate privileges to gain administrator rights.

 

TLDR: No, it's not safe.

Edited December 15, 2018 by gijs007