Anope IRC Services

Please login or register.

Login with username, password and session length
Advanced search  

News:

Pages: [1]   Go Down

Author Topic: Restrict modes from cs mlock \ clear  (Read 10707 times)

0 Members and 1 Guest are viewing this topic.

MeiR

  • Anope User
  • Offline Offline
  • Posts: 49
Restrict modes from cs mlock \ clear
« on: July 31, 2009, 02:14:51 AM »

I've encountered an issue when I tried to restrict modes from ircd (set::restrict-channelmodes in unreal).
After I set there some modes, users can easily remove \ add them by "/cs set #chan mlock +\-MODES" (removing can be done also with "/cs clear").

So I thought it'd be useful if modes could be restricted in anope's conf too, and not be used at these two methods.
(wishing to get to the day when ircd can supply this infomation to services. *communication* '-')
Logged

MeiR

  • Anope User
  • Offline Offline
  • Posts: 49
Re: Restrict modes from cs mlock \ clear
« Reply #1 on: November 28, 2010, 08:15:06 PM »

I'm bumping this thread, since I consider the issue as a kind of security lack.
Services shouldn't let users the ability to bypass ircd limitations.

Can someone please state his opinion, at least?
Thanks in advance :)
Logged

katsklaw

  • Supporter
  • Anope User
  • Offline Offline
  • Posts: 537
Re: Restrict modes from cs mlock \ clear
« Reply #2 on: November 28, 2010, 08:18:47 PM »

Anope has no way of knowing that users aren't allowed to unset modes. As you have stated, the ircd and services do not communicate that type of thing. So essentially you've already explained why this happens.

As far as Anope restricting mode changes, that can be done with a module. Check the modules site to see if someone has written one already.
Logged

MeiR

  • Anope User
  • Offline Offline
  • Posts: 49
Re: Restrict modes from cs mlock \ clear
« Reply #3 on: November 30, 2010, 10:37:45 PM »

I *know* anope can't know about ircd restrictions!

I meant in my request, that there'll be a separate restriction through anope, controlling which modes can't be mlocked.
Some conf directive like "CSRestrictMlock" would be useful for that...
Logged

Charles Kingsley

  • Contributor
  • *
  • Offline Offline
  • Posts: 1405
Re: Restrict modes from cs mlock \ clear
« Reply #4 on: December 01, 2010, 08:03:48 AM »

Can you explain a bit more about what modes exactly you're talking about as I am reading this as a huge functionality kill for users unless there is justification.
Logged

katsklaw

  • Supporter
  • Anope User
  • Offline Offline
  • Posts: 537
Re: Restrict modes from cs mlock \ clear
« Reply #5 on: December 01, 2010, 12:39:47 PM »

Since set::restrict-channelmodes can restrict any and all modes, I'd assume that for the sake of everyone that having the ability to restrict any or all modes would be the only correct answer.
Logged

MeiR

  • Anope User
  • Offline Offline
  • Posts: 49
Re: Restrict modes from cs mlock \ clear
« Reply #6 on: December 02, 2010, 10:22:50 PM »

Chaz, if you restrict any mode through ircd (let's say +G), the services server, which is u:lined of course, will be able to remove it.
So any channel owner can simply do "/cs set #chan mlock -G" or "/cs clear #chan modes", and bypass the restriction this way, after the services server will send "-G" rawmode.
He can even set mlock off again after the removal.

I assume that if a network owner restricts a mode through ircd, it should be restricted from services too, and won't consider as functionality kill.

Therefore, I suggest a config directive named "CSRestrictMlock" (or "CSRestrictMlockClear"\"CSRestrictModes") which will provide a restriction from anope's side.
There's the known mlock notice: "Mode r ignored because you can't lock it", so I guess that some part of the method is already implemented.
Logged

Charles Kingsley

  • Contributor
  • *
  • Offline Offline
  • Posts: 1405
Re: Restrict modes from cs mlock \ clear
« Reply #7 on: December 03, 2010, 08:00:08 AM »

Thank you for the explanation it makes more sense now.
Logged
Pages: [1]   Go Up