{"name":"Arma 3: CfgRemoteExec","title":"Arma 3: CfgRemoteExec","type":"topic","url":"https://community.bistudio.com/wiki/Arma_3:_CfgRemoteExec","revid":369492,"updated":"2024-09-06T17:55:01Z","aliases":["Arma 3 CfgRemoteExec","CfgRemoteExec"],"markdown":"CfgRemoteExec defines rules for the remote execution of functions and commands. These rules only apply to clients. The server is not subject to any limitations, everything is enabled and allowed for it.\n\n> [!NOTE]\n> As usual, the more local config takes precedence: Mission Description.ext (missionConfigFile) > Campaign Description.ext (campaignConfigFile) > Game / Mod Config (configFile).\n>\n> If several definitions for `CfgRemoteExec` exist, the `mode` attribute will be overridden by the last parsed config and whitelisted functions and commands will be merged.\n>\n> To allow for a mission's mod compatibility, see Mission Compatibility With Mods.\n\nSee Arma 3: Remote Execution for more information about remote execution.\n\n### Format\n\n```cpp\nclass CfgRemoteExec\n{\n    class Functions\n    {\n        mode = 2;\n        jip = 1;\n\n        class BIS_fnc_someFunction\n        {\n            allowedTargets = 0;\n            jip = 0;\n        };\n    };\n\n    class Commands\n    {\n        mode = 1;\n\n        class setDir\n        {\n            allowedTargets = 2;\n            jip = 0;\n        };\n    };\n};\n```\n\nIn a `class CfgRemoteExec` block, two objects can be defined:\n\n- Functions\n  - children of this object are named like the function they filter (e.g `class BIS_fnc_showSubtitle`)\n- Commands\n  - children of this object are named like the command they filter (e.g `class setDir`)\n\nBoth main objects can be configured using the following values:\n\n- `mode` - operation mode\n  - 0 - remote execution is blocked\n  - 1 - only whitelisted functions / commands are allowed\n  - 2 - remote execution is fully allowed, ignoring the whitelist (default, because of backward compatibility)\n- `jip` - Join In Progress settings\n  - 0 - JIP flag can not be set\n  - 1 - JIP flag can be set (default)\n\nTheir elements (functions, commands) can be configured with the following values:\n\n- `allowedTargets` - which machine can be reached by it\n  - 0 - can target all machines (default)\n  - 1 - can only target clients, execution on the server is denied\n  - 2 - can only target the server, execution on clients is denied\n- `jip` - Join In Progress settings parent override\n  - 0 - JIP flag can not be set\n  - 1 - JIP flag can be set\n\n### Safe Config\n\nThis config only allows required default game functions (see Notes).\n\n```cpp\nclass CfgRemoteExec\n{\n    class Functions\n    {\n        mode = 1;    // whitelist only\n        jip = 0;    // JIP flag not allowed\n\n        class BIS_fnc_effectKilledAirDestruction    { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_effectKilledSecondaries        { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_fire                            { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_objectVar                        { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_setCustomSoundController        { allowedTargets = 0; jip = 0; };\n\n/*\n        class BIS_fnc_debugConsoleExec                { allowedTargets = 0; }; //Allow debug console (optional)\n*/\n    };\n};\n```\n\n### Mission Compatibility With Mods (Arma 3 v2.14)\n\nA mod can define its own `CfgRemoteExec` to allow its own functions. If a mission defines it too, the mission overrides all the existing settings.\n\nTo circumvent that, use import in the mission's Description.ext:\n\n```cpp\nimport CfgRemoteExec as CfgRemoteExecMod;\n\nclass CfgRemoteExec : CfgRemoteExecMod\n{\n    // your settings\n};\n```\n\n### initPlayerServer.sqf\n\nIf execVM is not whitelisted, initPlayerServer.sqf will not be executed.\nTo have it functional without allowing execVM, use the following workaround through CfgFunctions:\n\n```cpp\nclass CfgFunctions\n{\n    class TAG\n    {\n        class Category\n        {\n            class initPlayerServer { file = \"initPlayerServer.sqf\"; };\n        };\n    };\n};\n```\n\n```cpp\nclass CfgRemoteExec\n{\n    class Functions\n    {\n        mode = 1;\n        class TAG_fnc_initPlayerServer { allowedTargets = 2; };\n    };\n};\n```\n\nThen execute it from init.sqf:\n\n```sqf\nif (hasInterface) then\n{\n    [] spawn {\n        waitUntil {!isNull player};\n        [player, didJIP] remoteExec [\"TAG_fnc_initPlayerServer\", 2];\n    };\n};\n```\n\n### Default Config\n\n> [!NOTE]\n> The default `CfgRemoteExec` in the game's main config uses an outdated format and is left for backward compatibility only (it was used directly by BIS_fnc_MP). The `Client` and `Server` classes are obsolete now. The new Remote Execution Framework ignores it (by default, all functions and commands are allowed).\n\nThis is the default config.cpp entry (obsolete):\n\n```cpp\nclass CfgRemoteExec\n{\n    class Server\n    {\n        class Functions\n        {\n            mode = 2;\n        };\n        class Commands\n        {\n            mode = 2;\n        };\n    };\n    class Client\n    {\n        class Functions\n        {\n            mode = 2;\n        };\n        class Commands\n        {\n            mode = 2;\n        };\n    };\n};\n```\n\n### Notes\n\n> **AgentRev** (2016-01-02):\n>\n> - As BIS_fnc_MP now uses remoteExec, there are some functions spontaneously called by the game core that require whitelisting in order to work if `class Functions` is set to `mode = 1`:\n>\n>   ```cpp\n>   class BIS_fnc_effectKilledAirDestruction {};\n>   class BIS_fnc_effectKilledSecondaries {};\n>   class BIS_fnc_fire {};\n>   class BIS_fnc_objectVar {};\n>   class BIS_fnc_setCustomSoundController {};\n>   ```\n> - For initPlayerServer.sqf to work, BIS_fnc_execVM would need to be whitelisted, but that should be avoided at all costs, as it allows hackers to bypass the whitelist. Use [this method](https://www.reddit.com/r/armadev/comments/8fkitd/initplayerserversqf_therefore_initplayerserversqf/dy5k5pf/) instead.\n> - For the debug console to be able to execute anything (even locally), BIS_fnc_debugConsoleExec must be whitelisted. This function only works when its remoteExecutedOwner is admin, so it is safe to whitelist for everyone.\n> - remoteExec and remoteExecCall are filtered by BattlEye's remoteexec.txt, the string analyzed by BE is formatted the same way as the following example's output:\n>\n>   ```sqf\n>   format [\"%1 %2\", functionName, str arguments]\n>   ```\n>\n>   The following remoteexec.txt exclusion can be used to safely allow all whitelisted *_fnc_* functions taking an array as parameter to go through:\n>\n>   ```sqf\n>   !=\"\\w+?_fnc_\\w+? \\[[\\S\\s]*\\]\"\n>   ```\n>\n>   Any attempt to exploit this exclusion using other RE methods like createUnit will run into \"Error Missing ;\" without any malicious code being executed. Mod makers should refrain from remote-executing raw commands from clients, as they require individual exclusions, and instead use *_fnc_* functions taking an array as parameter, which are covered by the above exclusion.","sections":[{"heading":null,"level":1,"markdown":"CfgRemoteExec defines rules for the remote execution of functions and commands. These rules only apply to clients. The server is not subject to any limitations, everything is enabled and allowed for it.\n\n> [!NOTE]\n> As usual, the more local config takes precedence: Mission Description.ext (missionConfigFile) > Campaign Description.ext (campaignConfigFile) > Game / Mod Config (configFile).\n>\n> If several definitions for `CfgRemoteExec` exist, the `mode` attribute will be overridden by the last parsed config and whitelisted functions and commands will be merged.\n>\n> To allow for a mission's mod compatibility, see Mission Compatibility With Mods.\n\nSee Arma 3: Remote Execution for more information about remote execution."},{"heading":"Format","level":3,"markdown":"```cpp\nclass CfgRemoteExec\n{\n    class Functions\n    {\n        mode = 2;\n        jip = 1;\n\n        class BIS_fnc_someFunction\n        {\n            allowedTargets = 0;\n            jip = 0;\n        };\n    };\n\n    class Commands\n    {\n        mode = 1;\n\n        class setDir\n        {\n            allowedTargets = 2;\n            jip = 0;\n        };\n    };\n};\n```\n\nIn a `class CfgRemoteExec` block, two objects can be defined:\n\n- Functions\n  - children of this object are named like the function they filter (e.g `class BIS_fnc_showSubtitle`)\n- Commands\n  - children of this object are named like the command they filter (e.g `class setDir`)\n\nBoth main objects can be configured using the following values:\n\n- `mode` - operation mode\n  - 0 - remote execution is blocked\n  - 1 - only whitelisted functions / commands are allowed\n  - 2 - remote execution is fully allowed, ignoring the whitelist (default, because of backward compatibility)\n- `jip` - Join In Progress settings\n  - 0 - JIP flag can not be set\n  - 1 - JIP flag can be set (default)\n\nTheir elements (functions, commands) can be configured with the following values:\n\n- `allowedTargets` - which machine can be reached by it\n  - 0 - can target all machines (default)\n  - 1 - can only target clients, execution on the server is denied\n  - 2 - can only target the server, execution on clients is denied\n- `jip` - Join In Progress settings parent override\n  - 0 - JIP flag can not be set\n  - 1 - JIP flag can be set"},{"heading":"Safe Config","level":3,"markdown":"This config only allows required default game functions (see Notes).\n\n```cpp\nclass CfgRemoteExec\n{\n    class Functions\n    {\n        mode = 1;    // whitelist only\n        jip = 0;    // JIP flag not allowed\n\n        class BIS_fnc_effectKilledAirDestruction    { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_effectKilledSecondaries        { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_fire                            { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_objectVar                        { allowedTargets = 0; jip = 0; };\n        class BIS_fnc_setCustomSoundController        { allowedTargets = 0; jip = 0; };\n\n/*\n        class BIS_fnc_debugConsoleExec                { allowedTargets = 0; }; //Allow debug console (optional)\n*/\n    };\n};\n```"},{"heading":"Mission Compatibility With Mods (Arma 3 v2.14)","level":3,"markdown":"A mod can define its own `CfgRemoteExec` to allow its own functions. If a mission defines it too, the mission overrides all the existing settings.\n\nTo circumvent that, use import in the mission's Description.ext:\n\n```cpp\nimport CfgRemoteExec as CfgRemoteExecMod;\n\nclass CfgRemoteExec : CfgRemoteExecMod\n{\n    // your settings\n};\n```"},{"heading":"initPlayerServer.sqf","level":3,"markdown":"If execVM is not whitelisted, initPlayerServer.sqf will not be executed.\nTo have it functional without allowing execVM, use the following workaround through CfgFunctions:\n\n```cpp\nclass CfgFunctions\n{\n    class TAG\n    {\n        class Category\n        {\n            class initPlayerServer { file = \"initPlayerServer.sqf\"; };\n        };\n    };\n};\n```\n\n```cpp\nclass CfgRemoteExec\n{\n    class Functions\n    {\n        mode = 1;\n        class TAG_fnc_initPlayerServer { allowedTargets = 2; };\n    };\n};\n```\n\nThen execute it from init.sqf:\n\n```sqf\nif (hasInterface) then\n{\n    [] spawn {\n        waitUntil {!isNull player};\n        [player, didJIP] remoteExec [\"TAG_fnc_initPlayerServer\", 2];\n    };\n};\n```"},{"heading":"Default Config","level":3,"markdown":"> [!NOTE]\n> The default `CfgRemoteExec` in the game's main config uses an outdated format and is left for backward compatibility only (it was used directly by BIS_fnc_MP). The `Client` and `Server` classes are obsolete now. The new Remote Execution Framework ignores it (by default, all functions and commands are allowed).\n\nThis is the default config.cpp entry (obsolete):\n\n```cpp\nclass CfgRemoteExec\n{\n    class Server\n    {\n        class Functions\n        {\n            mode = 2;\n        };\n        class Commands\n        {\n            mode = 2;\n        };\n    };\n    class Client\n    {\n        class Functions\n        {\n            mode = 2;\n        };\n        class Commands\n        {\n            mode = 2;\n        };\n    };\n};\n```"},{"heading":"Notes","level":3,"markdown":"> **AgentRev** (2016-01-02):\n>\n> - As BIS_fnc_MP now uses remoteExec, there are some functions spontaneously called by the game core that require whitelisting in order to work if `class Functions` is set to `mode = 1`:\n>\n>   ```cpp\n>   class BIS_fnc_effectKilledAirDestruction {};\n>   class BIS_fnc_effectKilledSecondaries {};\n>   class BIS_fnc_fire {};\n>   class BIS_fnc_objectVar {};\n>   class BIS_fnc_setCustomSoundController {};\n>   ```\n> - For initPlayerServer.sqf to work, BIS_fnc_execVM would need to be whitelisted, but that should be avoided at all costs, as it allows hackers to bypass the whitelist. Use [this method](https://www.reddit.com/r/armadev/comments/8fkitd/initplayerserversqf_therefore_initplayerserversqf/dy5k5pf/) instead.\n> - For the debug console to be able to execute anything (even locally), BIS_fnc_debugConsoleExec must be whitelisted. This function only works when its remoteExecutedOwner is admin, so it is safe to whitelist for everyone.\n> - remoteExec and remoteExecCall are filtered by BattlEye's remoteexec.txt, the string analyzed by BE is formatted the same way as the following example's output:\n>\n>   ```sqf\n>   format [\"%1 %2\", functionName, str arguments]\n>   ```\n>\n>   The following remoteexec.txt exclusion can be used to safely allow all whitelisted *_fnc_* functions taking an array as parameter to go through:\n>\n>   ```sqf\n>   !=\"\\w+?_fnc_\\w+? \\[[\\S\\s]*\\]\"\n>   ```\n>\n>   Any attempt to exploit this exclusion using other RE methods like createUnit will run into \"Error Missing ;\" without any malicious code being executed. Mod makers should refrain from remote-executing raw commands from clients, as they require individual exclusions, and instead use *_fnc_* functions taking an array as parameter, which are covered by the above exclusion."}],"categories":["Arma 3: Remote Execution","Introduced with Arma 3 version 1.50"],"groups":["Configuration"]}