2 * InspIRCd -- Internet Relay Chat Daemon
4 * Copyright (C) 2013, 2017-2018, 2020 Sadie Powell <sadie@witchery.services>
5 * Copyright (C) 2012-2016 Attila Molnar <attilamolnar@hush.com>
6 * Copyright (C) 2012 Robby <robby@chatbelgie.be>
7 * Copyright (C) 2009 Daniel De Graaf <danieldg@inspircd.org>
8 * Copyright (C) 2008, 2010 Craig Edwards <brain@inspircd.org>
9 * Copyright (C) 2007-2008 Robin Burchell <robin+git@viroteck.net>
11 * This file is part of InspIRCd. InspIRCd is free software: you can
12 * redistribute it and/or modify it under the terms of the GNU General Public
13 * License as published by the Free Software Foundation, version 2.
15 * This program is distributed in the hope that it will be useful, but WITHOUT
16 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
17 * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
20 * You should have received a copy of the GNU General Public License
21 * along with this program. If not, see <http://www.gnu.org/licenses/>.
26 #include "modules/whois.h"
31 RPL_WHOISSERVICE = 310,
37 /** Handles user mode +k
39 class ServProtectMode : public ModeHandler
42 ServProtectMode(Module* Creator) : ModeHandler(Creator, "servprotect", 'k', PARAM_NONE, MODETYPE_USER) { oper = true; }
44 ModeAction OnModeChange(User* source, User* dest, Channel* channel, std::string& parameter, bool adding) CXX11_OVERRIDE
46 /* Because this returns MODEACTION_DENY all the time, there is only ONE
47 * way to add this mode and that is at client introduction in the UID command,
48 * as this calls OnModeChange for each mode but disregards the return values.
49 * The mode cannot be manually added or removed, not even by a server or by a remote
50 * user or uline, which prevents its (ab)use as a kiddie 'god mode' on such networks.
51 * I'm sure if someone really wants to do that they can make a copy of this module
52 * that does the job. It won't be me though!
54 return MODEACTION_DENY;
58 class ModuleServProtectMode : public Module, public Whois::EventListener, public Whois::LineEventListener
62 ModuleServProtectMode()
63 : Whois::EventListener(this)
64 , Whois::LineEventListener(this)
69 Version GetVersion() CXX11_OVERRIDE
71 return Version("Adds user mode k (servprotect) which protects services pseudoclients from being kicked, being killed, or having their channel prefix modes changed.", VF_VENDOR);
74 void OnWhois(Whois::Context& whois) CXX11_OVERRIDE
76 if (whois.GetTarget()->IsModeSet(bm))
78 whois.SendLine(RPL_WHOISSERVICE, "is a Network Service on " + ServerInstance->Config->Network);
82 ModResult OnRawMode(User* user, Channel* chan, ModeHandler* mh, const std::string& param, bool adding) CXX11_OVERRIDE
84 /* Check that the mode is not a server mode, it is being removed, the user making the change is local, there is a parameter,
85 * and the user making the change is not a uline
87 if (!adding && chan && IS_LOCAL(user) && !param.empty())
89 const PrefixMode* const pm = mh->IsPrefixMode();
91 return MOD_RES_PASSTHRU;
93 /* Check if the parameter is a valid nick/uuid
95 User *u = ServerInstance->FindNick(param);
98 Membership* memb = chan->GetUser(u);
99 /* The target user has +k set on themselves, and you are trying to remove a privilege mode the user has set on themselves.
100 * This includes any prefix permission mode, even those registered in other modules, e.g. +qaohv. Using ::ModeString()
101 * here means that the number of modes is restricted to only modes the user has, limiting it to as short a loop as possible.
103 if ((u->IsModeSet(bm)) && (memb) && (memb->HasMode(pm)))
106 user->WriteNumeric(ERR_CHANOPRIVSNEEDED, chan->name, InspIRCd::Format("You are not permitted to remove privileges from %s services", ServerInstance->Config->Network.c_str()));
112 return MOD_RES_PASSTHRU;
115 ModResult OnKill(User* src, User* dst, const std::string &reason) CXX11_OVERRIDE
118 return MOD_RES_PASSTHRU;
120 if (dst->IsModeSet(bm))
122 src->WriteNumeric(ERR_KILLDENY, InspIRCd::Format("You are not permitted to kill %s services!", ServerInstance->Config->Network.c_str()));
123 ServerInstance->SNO->WriteGlobalSno('a', src->nick+" tried to kill service "+dst->nick+" ("+reason+")");
126 return MOD_RES_PASSTHRU;
129 ModResult OnUserPreKick(User *src, Membership* memb, const std::string &reason) CXX11_OVERRIDE
131 if (memb->user->IsModeSet(bm))
133 src->WriteNumeric(ERR_RESTRICTED, memb->chan->name, "You are not permitted to kick services");
137 return MOD_RES_PASSTHRU;
140 ModResult OnWhoisLine(Whois::Context& whois, Numeric::Numeric& numeric) CXX11_OVERRIDE
142 return ((numeric.GetNumeric() == 319) && whois.GetTarget()->IsModeSet(bm)) ? MOD_RES_DENY : MOD_RES_PASSTHRU;
146 MODULE_INIT(ModuleServProtectMode)