Disable mod security by default (closes #4944)

diff --git a/builtin/settingtypes.txt b/builtin/settingtypes.txt
index f0ddd5bc013ff16e7a8bb0ee1bcb2fcce1a351ee..1818b5a187cb1db97ddde01cfca04cce5e6335ed 100644 (file)
--- a/builtin/settingtypes.txt
+++ b/builtin/settingtypes.txt
@@ -1186,7 +1186,7 @@ mgvalleys_np_inter_valley_slope (Valley Slope) noise_params 0.5, 0.5, (128, 128,
 [*Security]
 
 #    Prevent mods from doing insecure things like running shell commands.
-secure.enable_security (Enable mod security) bool true
+secure.enable_security (Enable mod security) bool false
 
 #    Comma-separated list of trusted mods that are allowed to access insecure
 #    functions even when mod security is on (via request_insecure_environment()).

diff --git a/minetest.conf.example b/minetest.conf.example
index 6c7d1e66b11be742c17dbc44c02a7853e73abf7e..867d98584251b54a80eb55bacf862af12ce033c5 100644 (file)
--- a/minetest.conf.example
+++ b/minetest.conf.example
@@ -1530,7 +1530,7 @@
 
 #    Prevent mods from doing insecure things like running shell commands.
 #    type: bool
-# secure.enable_security = true
+# secure.enable_security = false
 
 #    Comma-separated list of trusted mods that are allowed to access insecure
 #    functions even when mod security is on (via request_insecure_environment()).

diff --git a/src/defaultsettings.cpp b/src/defaultsettings.cpp
index 60a34cf63edf4c587fc3504b3a9040d6569642d8..0b4be6322d7fb8022a6579225bca8557ec6cdefe 100644 (file)
--- a/src/defaultsettings.cpp
+++ b/src/defaultsettings.cpp
@@ -303,7 +303,7 @@ void set_default_settings(Settings *settings)
        settings->setDefault("emergequeue_limit_diskonly", "32");
        settings->setDefault("emergequeue_limit_generate", "32");
        settings->setDefault("num_emerge_threads", "1");
-       settings->setDefault("secure.enable_security", "true");
+       settings->setDefault("secure.enable_security", "false");
        settings->setDefault("secure.trusted_mods", "");
        settings->setDefault("secure.http_mods", "");