Enable mod security by default

diff --git a/builtin/settingtypes.txt b/builtin/settingtypes.txt
index 8668e14721fd1f3ea6569e4b37af15c4adf6f2f4..779224be4ed8a89d9d66a08cb3e3d00e106db5e8 100644 (file)
--- a/builtin/settingtypes.txt
+++ b/builtin/settingtypes.txt
@@ -1186,7 +1186,7 @@ mgvalleys_np_inter_valley_slope (Valley Slope) noise_params 0.5, 0.5, (128, 128,
 [*Security]
 
 #    Prevent mods from doing insecure things like running shell commands.
-secure.enable_security (Enable mod security) bool false
+secure.enable_security (Enable mod security) bool true
 
 #    Comma-separated list of trusted mods that are allowed to access insecure
 #    functions even when mod security is on (via request_insecure_environment()).

diff --git a/minetest.conf.example b/minetest.conf.example
index bf70f5e51a7682bd44f24101cb074700cfd4f322..13b2dc7a7d503e76167e01f35e286148f7077b02 100644 (file)
--- a/minetest.conf.example
+++ b/minetest.conf.example
@@ -1530,7 +1530,7 @@
 
 #    Prevent mods from doing insecure things like running shell commands.
 #    type: bool
-# secure.enable_security = false
+# secure.enable_security = true
 
 #    Comma-separated list of trusted mods that are allowed to access insecure
 #    functions even when mod security is on (via request_insecure_environment()).

diff --git a/src/defaultsettings.cpp b/src/defaultsettings.cpp
index 52f4cfec8995beae38a163e676cd4279580d9590..1096b8904aca7bfbe2a507412dc2101ac87dc4dd 100644 (file)
--- a/src/defaultsettings.cpp
+++ b/src/defaultsettings.cpp
@@ -303,7 +303,7 @@ void set_default_settings(Settings *settings)
        settings->setDefault("emergequeue_limit_diskonly", "32");
        settings->setDefault("emergequeue_limit_generate", "32");
        settings->setDefault("num_emerge_threads", "1");
-       settings->setDefault("secure.enable_security", "false");
+       settings->setDefault("secure.enable_security", "true");
        settings->setDefault("secure.trusted_mods", "");
        settings->setDefault("secure.http_mods", "");