-/* +------------------------------------+\r * | Inspire Internet Relay Chat Daemon |\r * +------------------------------------+\r *\r * InspIRCd: (C) 2002-2007 InspIRCd Development Team\r * See: http://www.inspircd.org/wiki/index.php/Credits\r *\r * This program is free but copyrighted software; see\r * the file COPYING for details.\r *\r * ---------------------------------------------------\r */\r\r#include "inspircd.h"\r#include "users.h"\r#include "channels.h"\r#include "modules.h"\r#include "configreader.h"\r#include "wildcard.h"\r\r/* $ModDesc: Provides support for unreal-style oper-override */\r\rtypedef std::map<std::string,std::string> override_t;\r\rclass ModuleOverride : public Module\r{\r \r override_t overrides;\r bool NoisyOverride;\r bool OverriddenMode;\r int OverOps, OverDeops, OverVoices, OverDevoices, OverHalfops, OverDehalfops;\r\r public:\r \r ModuleOverride(InspIRCd* Me)\r : Module(Me)\r { \r // read our config options (main config file)\r OnRehash(NULL,"");\r ServerInstance->SNO->EnableSnomask('O',"OVERRIDE");\r OverriddenMode = false;\r OverOps = OverDeops = OverVoices = OverDevoices = OverHalfops = OverDehalfops = 0;\r }\r \r virtual void OnRehash(userrec* user, const std::string ¶meter)\r {\r // on a rehash we delete our classes for good measure and create them again.\r ConfigReader* Conf = new ConfigReader(ServerInstance);\r \r // re-read our config options on a rehash\r NoisyOverride = Conf->ReadFlag("override","noisy",0);\r overrides.clear();\r for (int j =0; j < Conf->Enumerate("type"); j++)\r {\r std::string typen = Conf->ReadValue("type","name",j);\r std::string tokenlist = Conf->ReadValue("type","override",j);\r overrides[typen] = tokenlist;\r }\r \r DELETE(Conf);\r }\r\r void Implements(char* List)\r {\r List[I_OnRehash] = List[I_OnAccessCheck] = List[I_On005Numeric] = List[I_OnUserPreJoin] = List[I_OnUserPreKick] = List[I_OnPostCommand] = 1;\r }\r\r virtual void OnPostCommand(const std::string &command, const char** parameters, int pcnt, userrec *user, CmdResult result, const std::string &original_line)\r {\r if ((NoisyOverride) && (OverriddenMode) && (irc::string(command.c_str()) == "MODE") && (result == CMD_SUCCESS))\r {\r int Total = OverOps + OverDeops + OverVoices + OverDevoices + OverHalfops + OverDehalfops;\r\r ServerInstance->SNO->WriteToSnoMask('O',std::string(user->nick)+" Overriding modes: "+ServerInstance->Modes->GetLastParse()+" "+(Total ? "[Detail: " : "")+\r (OverOps ? ConvToStr(OverOps)+" op"+(OverOps != 1 ? "s" : "")+" " : "")+\r (OverDeops ? ConvToStr(OverDeops)+" deop"+(OverDeops != 1 ? "s" : "")+" " : "")+\r (OverVoices ? ConvToStr(OverVoices)+" voice"+(OverVoices != 1 ? "s" : "")+" " : "")+\r (OverDevoices ? ConvToStr(OverDevoices)+" devoice"+(OverDevoices != 1 ? "s" : "")+" " : "")+\r (OverHalfops ? ConvToStr(OverHalfops)+" halfop"+(OverHalfops != 1 ? "s" : "")+" " : "")+\r (OverDehalfops ? ConvToStr(OverDehalfops)+" dehalfop"+(OverDehalfops != 1 ? "s" : "") : "")\r +(Total ? "]" : ""));\r\r OverriddenMode = false;\r OverOps = OverDeops = OverVoices = OverDevoices = OverHalfops = OverDehalfops = 0;\r }\r }\r\r virtual void On005Numeric(std::string &output)\r {\r output.append(" OVERRIDE");\r }\r\r virtual bool CanOverride(userrec* source, char* token)\r {\r // checks to see if the oper's type has <type:override>\r override_t::iterator j = overrides.find(source->oper);\r\r if (j != overrides.end())\r {\r // its defined or * is set, return its value as a boolean for if the token is set\r return ((j->second.find(token, 0) != std::string::npos) || (j->second.find("*", 0) != std::string::npos));\r }\r\r // its not defined at all, count as false\r return false;\r }\r\r virtual int OnUserPreKick(userrec* source, userrec* user, chanrec* chan, const std::string &reason)\r {\r if (IS_OPER(source) && CanOverride(source,"KICK"))\r {\r if (((chan->GetStatus(source) == STATUS_HOP) && (chan->GetStatus(user) == STATUS_OP)) || (chan->GetStatus(source) < STATUS_VOICE))\r {\r ServerInstance->SNO->WriteToSnoMask('O',std::string(source->nick)+" Override-Kicked "+std::string(user->nick)+" on "+std::string(chan->name)+" ("+reason+")");\r }\r /* Returning -1 explicitly allows the kick */\r return -1;\r }\r return 0;\r }\r \r virtual int OnAccessCheck(userrec* source,userrec* dest,chanrec* channel,int access_type)\r {\r if (IS_OPER(source))\r {\r if (source && channel)\r {\r // Fix by brain - allow the change if they arent on channel - rely on boolean short-circuit\r // to not check the other items in the statement if they arent on the channel\r int mode = channel->GetStatus(source);\r switch (access_type)\r {\r case AC_DEOP:\r if (CanOverride(source,"MODEDEOP"))\r {\r if (NoisyOverride)\r if ((!channel->HasUser(source)) || (mode < STATUS_OP))\r OverDeops++;\r return ACR_ALLOW;\r }\r else\r {\r return ACR_DEFAULT;\r }\r break;\r case AC_OP:\r if (CanOverride(source,"MODEOP"))\r {\r if (NoisyOverride)\r if ((!channel->HasUser(source)) || (mode < STATUS_OP))\r OverOps++;\r return ACR_ALLOW;\r }\r else\r {\r return ACR_DEFAULT;\r }\r break;\r case AC_VOICE:\r if (CanOverride(source,"MODEVOICE"))\r {\r if (NoisyOverride)\r if ((!channel->HasUser(source)) || (mode < STATUS_HOP))\r OverVoices++;\r return ACR_ALLOW;\r }\r else\r {\r return ACR_DEFAULT;\r }\r break;\r case AC_DEVOICE:\r if (CanOverride(source,"MODEDEVOICE"))\r {\r if (NoisyOverride)\r if ((!channel->HasUser(source)) || (mode < STATUS_HOP))\r OverDevoices++;\r return ACR_ALLOW;\r }\r else\r {\r return ACR_DEFAULT;\r }\r break;\r case AC_HALFOP:\r if (CanOverride(source,"MODEHALFOP"))\r {\r if (NoisyOverride)\r if ((!channel->HasUser(source)) || (mode < STATUS_OP))\r OverHalfops++;\r return ACR_ALLOW;\r }\r else\r {\r return ACR_DEFAULT;\r }\r break;\r case AC_DEHALFOP:\r if (CanOverride(source,"MODEDEHALFOP"))\r {\r if (NoisyOverride)\r if ((!channel->HasUser(source)) || (mode < STATUS_OP))\r OverDehalfops++;\r return ACR_ALLOW;\r }\r else\r {\r return ACR_DEFAULT;\r }\r break;\r }\r \r if (CanOverride(source,"OTHERMODE"))\r {\r if (NoisyOverride)\r if ((!channel->HasUser(source)) || (mode < STATUS_OP))\r {\r OverriddenMode = true;\r OverOps = OverDeops = OverVoices = OverDevoices = OverHalfops = OverDehalfops = 0;\r }\r return ACR_ALLOW;\r }\r else\r {\r return ACR_DEFAULT;\r }\r }\r }\r\r return ACR_DEFAULT;\r }\r \r virtual int OnUserPreJoin(userrec* user, chanrec* chan, const char* cname, std::string &privs)\r {\r if (IS_OPER(user))\r {\r if (chan)\r {\r if ((chan->modes[CM_INVITEONLY]) && (CanOverride(user,"INVITE")))\r {\r irc::string x = chan->name;\r if (!user->IsInvited(x))\r {\r /* XXX - Ugly cast for a parameter that isn't used? :< - Om */\r if (NoisyOverride)\r chan->WriteChannelWithServ(ServerInstance->Config->ServerName, "NOTICE %s :%s used oper-override to bypass invite-only", cname, user->nick);\r ServerInstance->SNO->WriteToSnoMask('O',std::string(user->nick)+" used operoverride to bypass +i on "+std::string(cname));\r }\r return -1;\r }\r \r if ((*chan->key) && (CanOverride(user,"KEY")))\r {\r if (NoisyOverride)\r chan->WriteChannelWithServ(ServerInstance->Config->ServerName, "NOTICE %s :%s used oper-override to bypass the channel key", cname, user->nick);\r ServerInstance->SNO->WriteToSnoMask('O',std::string(user->nick)+" used operoverride to bypass +k on "+std::string(cname));\r return -1;\r }\r \r if ((chan->limit > 0) && (chan->GetUserCounter() >= chan->limit) && (CanOverride(user,"LIMIT")))\r {\r if (NoisyOverride)\r chan->WriteChannelWithServ(ServerInstance->Config->ServerName, "NOTICE %s :%s used oper-override to bypass the channel limit", cname, user->nick);\r ServerInstance->SNO->WriteToSnoMask('O',std::string(user->nick)+" used operoverride to bypass +l on "+std::string(cname));\r return -1;\r }\r\r if (CanOverride(user,"BANWALK"))\r {\r if (chan->IsBanned(user))\r {\r if (NoisyOverride)\r chan->WriteChannelWithServ(ServerInstance->Config->ServerName, "NOTICE %s :%s used oper-override to bypass channel ban", cname, user->nick);\r ServerInstance->SNO->WriteToSnoMask('O',"%s used oper-override to bypass channel ban on %s", user->nick, cname);\r }\r return -1;\r }\r }\r }\r return 0;\r }\r \r virtual ~ModuleOverride()\r {\r ServerInstance->SNO->DisableSnomask('O');\r }\r \r virtual Version GetVersion()\r {\r return Version(1,1,0,1,VF_VENDOR,API_VERSION);\r }\r};\r\rMODULE_INIT(ModuleOverride)\r
\ No newline at end of file
+/*
+ * InspIRCd -- Internet Relay Chat Daemon
+ *
+ * Copyright (C) 2020 satmd <satmd@users.noreply.github.com>
+ * Copyright (C) 2017 B00mX0r <b00mx0r@aureus.pw>
+ * Copyright (C) 2017 Adam <Adam@anope.org>
+ * Copyright (C) 2016 Sheogorath <sheogorath@shivering-isles.com>
+ * Copyright (C) 2013, 2017, 2020 Sadie Powell <sadie@witchery.services>
+ * Copyright (C) 2013 Daniel Vassdal <shutter@canternet.org>
+ * Copyright (C) 2012-2015 Attila Molnar <attilamolnar@hush.com>
+ * Copyright (C) 2012 Shawn Smith <ShawnSmith0828@gmail.com>
+ * Copyright (C) 2012 Robby <robby@chatbelgie.be>
+ * Copyright (C) 2009-2010 Daniel De Graaf <danieldg@inspircd.org>
+ * Copyright (C) 2009 Uli Schlachter <psychon@inspircd.org>
+ * Copyright (C) 2008 Robin Burchell <robin+git@viroteck.net>
+ * Copyright (C) 2007-2008 Dennis Friis <peavey@inspircd.org>
+ * Copyright (C) 2004, 2006, 2008, 2010 Craig Edwards <brain@inspircd.org>
+ *
+ * This file is part of InspIRCd. InspIRCd is free software: you can
+ * redistribute it and/or modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
+ *
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+ * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+
+#include "inspircd.h"
+#include "modules/invite.h"
+
+class Override : public SimpleUserModeHandler
+{
+ public:
+ Override(Module* Creator) : SimpleUserModeHandler(Creator, "override", 'O')
+ {
+ oper = true;
+ if (!ServerInstance->Config->ConfValue("override")->getBool("enableumode"))
+ DisableAutoRegister();
+ }
+};
+
+class ModuleOverride : public Module
+{
+ bool RequireKey;
+ bool NoisyOverride;
+ bool UmodeEnabled;
+ Override ou;
+ ChanModeReference topiclock;
+ ChanModeReference inviteonly;
+ ChanModeReference key;
+ ChanModeReference limit;
+ Invite::API invapi;
+
+ static bool IsOverride(unsigned int userlevel, const Modes::ChangeList::List& list)
+ {
+ for (Modes::ChangeList::List::const_iterator i = list.begin(); i != list.end(); ++i)
+ {
+ ModeHandler* mh = i->mh;
+ if (mh->GetLevelRequired(i->adding) > userlevel)
+ return true;
+ }
+ return false;
+ }
+
+ ModResult HandleJoinOverride(LocalUser* user, Channel* chan, const std::string& keygiven, const char* bypasswhat, const char* mode)
+ {
+ if (RequireKey && keygiven != "override")
+ {
+ // Can't join normally -- must use a special key to bypass restrictions
+ user->WriteNotice("*** You may not join normally. You must join with a key of 'override' to oper override.");
+ return MOD_RES_PASSTHRU;
+ }
+
+ if (NoisyOverride)
+ chan->WriteRemoteNotice(InspIRCd::Format("%s used oper override to bypass %s", user->nick.c_str(), bypasswhat));
+ ServerInstance->SNO->WriteGlobalSno('v', user->nick+" used oper override to bypass " + mode + " on " + chan->name);
+ return MOD_RES_ALLOW;
+ }
+
+ public:
+ ModuleOverride()
+ : UmodeEnabled(false)
+ , ou(this)
+ , topiclock(this, "topiclock")
+ , inviteonly(this, "inviteonly")
+ , key(this, "key")
+ , limit(this, "limit")
+ , invapi(this)
+ {
+ }
+
+ void init() CXX11_OVERRIDE
+ {
+ ServerInstance->SNO->EnableSnomask('v', "OVERRIDE");
+ UmodeEnabled = ServerInstance->Config->ConfValue("override")->getBool("enableumode");
+ }
+
+ void ReadConfig(ConfigStatus& status) CXX11_OVERRIDE
+ {
+ // re-read our config options
+ ConfigTag* tag = ServerInstance->Config->ConfValue("override");
+ NoisyOverride = tag->getBool("noisy");
+ RequireKey = tag->getBool("requirekey");
+ }
+
+ void On005Numeric(std::map<std::string, std::string>& tokens) CXX11_OVERRIDE
+ {
+ tokens["OVERRIDE"];
+ }
+
+ bool CanOverride(User* source, const char* token)
+ {
+ // If we require oper override umode (+O) but it is not set
+ if (UmodeEnabled && !source->IsModeSet(ou))
+ return false;
+
+ std::string tokenlist = source->oper->getConfig("override");
+ // its defined or * is set, return its value as a boolean for if the token is set
+ return ((tokenlist.find(token, 0) != std::string::npos) || (tokenlist.find("*", 0) != std::string::npos));
+ }
+
+
+ ModResult OnPreTopicChange(User *source, Channel *channel, const std::string &topic) CXX11_OVERRIDE
+ {
+ if (IS_LOCAL(source) && source->IsOper() && CanOverride(source, "TOPIC"))
+ {
+ if (!channel->HasUser(source) || (channel->IsModeSet(topiclock) && channel->GetPrefixValue(source) < HALFOP_VALUE))
+ {
+ ServerInstance->SNO->WriteGlobalSno('v',source->nick+" used oper override to change a topic on "+channel->name);
+ }
+
+ // Explicit allow
+ return MOD_RES_ALLOW;
+ }
+
+ return MOD_RES_PASSTHRU;
+ }
+
+ ModResult OnUserPreKick(User* source, Membership* memb, const std::string &reason) CXX11_OVERRIDE
+ {
+ if (source->IsOper() && CanOverride(source,"KICK"))
+ {
+ // If the kicker's status is less than the target's, or the kicker's status is less than or equal to voice
+ if ((memb->chan->GetPrefixValue(source) < memb->getRank()) || (memb->chan->GetPrefixValue(source) <= VOICE_VALUE) ||
+ (memb->chan->GetPrefixValue(source) == HALFOP_VALUE && memb->getRank() == HALFOP_VALUE))
+ {
+ ServerInstance->SNO->WriteGlobalSno('v',source->nick+" used oper override to kick "+memb->user->nick+" on "+memb->chan->name+" ("+reason+")");
+ return MOD_RES_ALLOW;
+ }
+ }
+ return MOD_RES_PASSTHRU;
+ }
+
+ ModResult OnPreMode(User* source, User* dest, Channel* channel, Modes::ChangeList& modes) CXX11_OVERRIDE
+ {
+ if (!channel)
+ return MOD_RES_PASSTHRU;
+ if (!source->IsOper() || !IS_LOCAL(source))
+ return MOD_RES_PASSTHRU;
+
+ const Modes::ChangeList::List& list = modes.getlist();
+ unsigned int mode = channel->GetPrefixValue(source);
+
+ if (!IsOverride(mode, list))
+ return MOD_RES_PASSTHRU;
+
+ if (CanOverride(source, "MODE"))
+ {
+ std::string msg = source->nick + " used oper override to set modes on " + channel->name + ": ";
+
+ // Construct a MODE string in the old format for sending it as a snotice
+ std::string params;
+ char pm = 0;
+ for (Modes::ChangeList::List::const_iterator i = list.begin(); i != list.end(); ++i)
+ {
+ const Modes::Change& item = *i;
+ if (!item.param.empty())
+ params.append(1, ' ').append(item.param);
+
+ char wanted_pm = (item.adding ? '+' : '-');
+ if (wanted_pm != pm)
+ {
+ pm = wanted_pm;
+ msg += pm;
+ }
+
+ msg += item.mh->GetModeChar();
+ }
+ msg += params;
+ ServerInstance->SNO->WriteGlobalSno('v',msg);
+ return MOD_RES_ALLOW;
+ }
+ return MOD_RES_PASSTHRU;
+ }
+
+ ModResult OnUserPreJoin(LocalUser* user, Channel* chan, const std::string& cname, std::string& privs, const std::string& keygiven) CXX11_OVERRIDE
+ {
+ if (user->IsOper())
+ {
+ if (chan)
+ {
+ if (chan->IsModeSet(inviteonly) && (CanOverride(user,"INVITE")))
+ {
+ if (!invapi->IsInvited(user, chan))
+ return HandleJoinOverride(user, chan, keygiven, "invite-only", "+i");
+ return MOD_RES_ALLOW;
+ }
+
+ if (chan->IsModeSet(key) && (CanOverride(user,"KEY")) && keygiven != chan->GetModeParameter(key))
+ return HandleJoinOverride(user, chan, keygiven, "the channel key", "+k");
+
+ if (chan->IsModeSet(limit) && (chan->GetUserCounter() >= ConvToNum<size_t>(chan->GetModeParameter(limit))) && (CanOverride(user,"LIMIT")))
+ return HandleJoinOverride(user, chan, keygiven, "the channel limit", "+l");
+
+ if (chan->IsBanned(user) && CanOverride(user,"BANWALK"))
+ return HandleJoinOverride(user, chan, keygiven, "channel ban", "channel ban");
+ }
+ }
+ return MOD_RES_PASSTHRU;
+ }
+
+ Version GetVersion() CXX11_OVERRIDE
+ {
+ return Version("Allows server operators to be given privileges that allow them to ignore various channel-level restrictions.",VF_VENDOR);
+ }
+};
+
+MODULE_INIT(ModuleOverride)
projects / user / henk / code / inspircd.git / blobdiff