Anope IRC Services

Anope Development => Modules => Topic started by: zach on January 09, 2007, 04:30:19 AM

Title: need module
Post by: zach on January 09, 2007, 04:30:19 AM
Need a module written if it's not already, for it to be impossible to ban kick +m-voaq or have services do anything to opers if executed by a regular user.  Possible?
Title:
Post by: SpaceDoG on January 09, 2007, 02:46:08 PM
Did you ever think there might be a reason that users you can't kick opers? If your opers are exploiting that capability then they shouldn't be opers to begin with.
Title:
Post by: zach on January 10, 2007, 09:39:12 PM
I trust my opers, but you can still kick opers with U:Lined servers (ie services), it's the IRCd that prevents manual KICKs.
Title:
Post by: SpaceDoG on January 11, 2007, 02:50:17 PM
So then why not just give your opers SuperAdmin access? That will allow them to pretend to be channel founders in _ALL_ rooms preventing them from being kicked while they attempt to resolve issues.
Title:
Post by: katsklaw on January 11, 2007, 04:46:08 PM
why exactly are you wanting your opers to be un-kickable even by ulined connections?
Title:
Post by: zach on January 12, 2007, 12:00:59 AM
Because I need it to, I can't say much else.  I run a very secure network, and I want it to stay that way.  My opers don't abuse their privileges, but we have loggers that sit in some ... questionable ... channels, and for legal reasons, I need those to be logged.
Title:
Post by: BigBen on January 12, 2007, 09:33:26 PM
u can set in the unreal config file, to the users you dont want banned, for example:

   /* don't ban stskeeps */
   mask           *stskeeps@212.*;
      /* dont ban BigBen */
      mask           *blah@*;
      /* dont ban Ghost */
      mask           *blah@*;
      /* dont ban Cameron */
      mask           *blah@*;
      /* dont ban ` */
      mask           *blah@*;


like that.
Title:
Post by: katsklaw on January 12, 2007, 11:53:44 PM
Quote
Originally posted by zach
Because I need it to, I can't say much else.  I run a very secure network, and I want it to stay that way.  My opers don't abuse their privileges, but we have loggers that sit in some ... questionable ... channels, and for legal reasons, I need those to be logged.


Well with UnrealIRCd there is a umode +q .. not to be confused with the channel mode +q .. the umode +q can only be used by opers and it makes it where they cannot be kicked from any channel, except by ulined servers. Just like chanmode +q that allpies to channel founders, except it's global .. it gives the same as chanmode +q to the oper in every channel. You want this as a "failsafe". Services/Stats are the only servers that should be ulined, thus Services is the only entity that can kick the oper. There is no reason you can't log the channels you wish with more than umode +q.

Since you trust your opers as well as you say you do, then you don't need kick protection from ulined servers because none of your trustworthy staff will kick opers out of suspicious channels in the first place.

With all that said, the ability to be kicked is 100% in the ircd and has nothing to do with services at all. Services can only REQUEST mode changes .. it's up to the IRCd to actually do the changing and there is nothing we can do about that. The best services would ever do is unban the oper and/or invite them backin the channel because services learns about the kick AFTER it happens, so it's impossible for services to prevent it.

[Edited on 12-1-2007 by katsklaw]
Title:
Post by: Jobe on January 13, 2007, 12:22:20 PM
katsklaw i think you missed the point that what he was after was to prevent opers from being kickable using services commands such as OperServ KICK and ChanServ KICK, which no IRCd user mode or channel mode can prevent.
Title:
Post by: katsklaw on January 13, 2007, 07:17:08 PM
Quote
Originally posted by Jobe1986
katsklaw i think you missed the point that what he was after was to prevent opers from being kickable using services commands such as OperServ KICK and ChanServ KICK, which no IRCd user mode or channel mode can prevent.


I think you missed the part where he said "impossible to ban kick +m-voaq or have services do anything to opers if executed by a regular user"

Other opers are NOT regular users. He said NOTHING about preventing opers from kicking other opers ... to be honest I did forget about the CS kick command.

Yes, a module can be written that makes it so opers can't be kicked using it. Whether anyone feels the need to write it is another question.
Title:
Post by: zach on January 13, 2007, 08:37:48 PM
Yeah, I trust my opers not to kick other opers, but that's not the point. I need it to be able to prevent regular users from kicking opers in any way shape or form. :)
Title:
Post by: n00bie on January 14, 2007, 01:06:52 PM
try this module ( cs_restrict_kb ) for Anope-1.7.18
http://modules.anope.org/viewmod.php?id=79

[Edited on 16-1-2007 by n00bie]