What is the risk to allow .dll files?

[Ben-EdgeGameServers.com]

Hi , I'm getting LOT'S of request from customer's to add .dll files and I just cannot take it anymore.. These days everyone has there own mods..

And I really want to allow the clients to upload .dll files.

Now I want to know what is the risk for letting them do it?

 

Regards,

Benjamin.

[LFA]

It's like letting your client run their own exe on your server. You don't know what it does. v2 runs the game servers with guest permissions by default so risk lowered but could still use it for ddos, spam, etc.

 

If you allow .dll at least update the game's "run as" to user per service so they can't see each others files. Run the verify/repair tool with "Update Run As user" to update all existing services.

[Bubka3]

If I wanted to use it for ddos spam or anything else, I would take advantage of meta mod and the various srcds exploits.

[adamnp]

While it may seem time consuming setting it up properly, it's going to be way more time consuming redoing your entire system after a rm -rf.

 

Let alone attempting to rebuild your image.

 

Just my opinion....I don't ever skimp on security.

[Shepsie]

With garrysmod, modules can be made to browse folder and create files even with the servers run under guest accounts.

 

This was tested on v1 hopefully I'll have my friend test v2 for me.

[LFA]

With garrysmod, modules can be made to browse folder and create files even with the servers run under guest accounts.

 

This was tested on v1 hopefully I'll have my friend test v2 for me.

 

I don't think there is a way to completely disable browsing on other folders. You can't deny access to the windows folder because the game's executable needs access to the dlls in the System32 folder. You can probably only deny access to program files. Guest users should not be able to write to the system folders with the default windows permissions.

[Shepsie]

I don't think there is a way to completely disable browsing on other folders. You can't deny access to the windows folder because the game's executable needs access to the dlls in the System32 folder. You can probably only deny access to program files. Guest users should not be able to write to the system folders with the default windows permissions.

 

 

He could read my tcadmin files and he could place a php script into the fast download directory.

[LFA]

In v1 the games run as local system by default. You can run them as a guest with these instructions: http://clients.tcadmin.com/knowledgebase.php?action=displayarticle&id=37

 

In v2 they run as a guest by default.