-/* +------------------------------------+
- * | Inspire Internet Relay Chat Daemon |
- * +------------------------------------+
+/*
+ * InspIRCd -- Internet Relay Chat Daemon
*
- * InspIRCd: (C) 2002-2008 InspIRCd Development Team
- * See: http://www.inspircd.org/wiki/index.php/Credits
+ * Copyright (C) 2009 Daniel De Graaf <danieldg@inspircd.org>
+ * Copyright (C) 2008 Craig Edwards <craigedwards@brainbox.cc>
+ * Copyright (C) 2007 Robin Burchell <robin+git@viroteck.net>
*
- * This program is free but copyrighted software; see
- * the file COPYING for details.
+ * This file is part of InspIRCd. InspIRCd is free software: you can
+ * redistribute it and/or modify it under the terms of the GNU General Public
+ * License as published by the Free Software Foundation, version 2.
*
- * ---------------------------------------------------
+ * This program is distributed in the hope that it will be useful, but WITHOUT
+ * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
+ * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
+ * details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
+
#include "inspircd.h"
-#include <stdio.h>
-#include <string>
-#include "users.h"
-#include "channels.h"
-#include "modules.h"
-#include "configreader.h"
+#include "modules/whois.h"
-/* $ModDesc: Provides support for Austhex style +k / UnrealIRCD +S services mode */
+enum
+{
+ // From AustHex.
+ RPL_WHOISSERVICE = 310,
+
+ // From UnrealIRCd.
+ ERR_KILLDENY = 485
+};
/** Handles user mode +k
*/
class ServProtectMode : public ModeHandler
{
public:
- ServProtectMode(InspIRCd* Instance) : ModeHandler(Instance, 'k', 0, 0, false, MODETYPE_USER, true) { }
+ ServProtectMode(Module* Creator) : ModeHandler(Creator, "servprotect", 'k', PARAM_NONE, MODETYPE_USER) { oper = true; }
- ModeAction OnModeChange(User* source, User* dest, Channel* channel, std::string ¶meter, bool adding, bool)
+ ModeAction OnModeChange(User* source, User* dest, Channel* channel, std::string& parameter, bool adding) CXX11_OVERRIDE
{
+ /* Because this returns MODEACTION_DENY all the time, there is only ONE
+ * way to add this mode and that is at client introduction in the UID command,
+ * as this calls OnModeChange for each mode but disregards the return values.
+ * The mode cannot be manually added or removed, not even by a server or by a remote
+ * user or uline, which prevents its (ab)use as a kiddie 'god mode' on such networks.
+ * I'm sure if someone really wants to do that they can make a copy of this module
+ * that does the job. It won't be me though!
+ */
return MODEACTION_DENY;
}
-
- bool NeedsOper() { return true; }
};
-class ModuleServProtectMode : public Module
+class ModuleServProtectMode : public Module, public Whois::EventListener, public Whois::LineEventListener
{
-
- ServProtectMode* bm;
+ ServProtectMode bm;
public:
- ModuleServProtectMode(InspIRCd* Me)
- : Module(Me)
+ ModuleServProtectMode()
+ : Whois::EventListener(this)
+ , Whois::LineEventListener(this)
+ , bm(this)
{
-
- bm = new ServProtectMode(ServerInstance);
- if (!ServerInstance->Modes->AddMode(bm))
- throw ModuleException("Could not add new modes!");
- Implementation eventlist[] = { I_OnWhois, I_OnKill, I_OnWhoisLine };
- ServerInstance->Modules->Attach(eventlist, this, 3);
}
-
- virtual ~ModuleServProtectMode()
+ Version GetVersion() CXX11_OVERRIDE
{
- ServerInstance->Modes->DelMode(bm);
- delete bm;
+ return Version("Provides user mode +k to protect services from kicks, kills, and mode changes", VF_VENDOR);
}
-
- virtual Version GetVersion()
+
+ void OnWhois(Whois::Context& whois) CXX11_OVERRIDE
{
- return Version(1,2,0,0,VF_COMMON,API_VERSION);
+ if (whois.GetTarget()->IsModeSet(bm))
+ {
+ whois.SendLine(RPL_WHOISSERVICE, "is a Network Service on " + ServerInstance->Config->Network);
+ }
}
- virtual void OnWhois(User* src, User* dst)
+ ModResult OnRawMode(User* user, Channel* chan, ModeHandler* mh, const std::string& param, bool adding) CXX11_OVERRIDE
{
- if (dst->IsModeSet('k'))
+ /* Check that the mode is not a server mode, it is being removed, the user making the change is local, there is a parameter,
+ * and the user making the change is not a uline
+ */
+ if (!adding && chan && IS_LOCAL(user) && !param.empty())
{
- ServerInstance->SendWhoisLine(src, dst, 310, std::string(src->nick)+" "+std::string(dst->nick)+" :is an "+ServerInstance->Config->Network+" Service");
+ const PrefixMode* const pm = mh->IsPrefixMode();
+ if (!pm)
+ return MOD_RES_PASSTHRU;
+
+ /* Check if the parameter is a valid nick/uuid
+ */
+ User *u = ServerInstance->FindNick(param);
+ if (u)
+ {
+ Membership* memb = chan->GetUser(u);
+ /* The target user has +k set on themselves, and you are trying to remove a privilege mode the user has set on themselves.
+ * This includes any prefix permission mode, even those registered in other modules, e.g. +qaohv. Using ::ModeString()
+ * here means that the number of modes is restricted to only modes the user has, limiting it to as short a loop as possible.
+ */
+ if ((u->IsModeSet(bm)) && (memb) && (memb->HasMode(pm)))
+ {
+ /* BZZZT, Denied! */
+ user->WriteNumeric(ERR_CHANOPRIVSNEEDED, chan->name, InspIRCd::Format("You are not permitted to remove privileges from %s services", ServerInstance->Config->Network.c_str()));
+ return MOD_RES_DENY;
+ }
+ }
}
+ /* Mode allowed */
+ return MOD_RES_PASSTHRU;
}
- virtual int OnKill(User* src, User* dst, const std::string &reason)
+ ModResult OnKill(User* src, User* dst, const std::string &reason) CXX11_OVERRIDE
{
if (src == NULL)
- return 0;
+ return MOD_RES_PASSTHRU;
+
+ if (dst->IsModeSet(bm))
+ {
+ src->WriteNumeric(ERR_KILLDENY, InspIRCd::Format("You are not permitted to kill %s services!", ServerInstance->Config->Network.c_str()));
+ ServerInstance->SNO->WriteGlobalSno('a', src->nick+" tried to kill service "+dst->nick+" ("+reason+")");
+ return MOD_RES_DENY;
+ }
+ return MOD_RES_PASSTHRU;
+ }
- if (dst->IsModeSet('k'))
+ ModResult OnUserPreKick(User *src, Membership* memb, const std::string &reason) CXX11_OVERRIDE
+ {
+ if (memb->user->IsModeSet(bm))
{
- src->WriteNumeric(485, "%s :You are not allowed to kill %s Services!", src->nick.c_str(), ServerInstance->Config->Network);
- ServerInstance->SNO->WriteToSnoMask('A', std::string(src->nick)+" tried to kill service "+dst->nick+" ("+reason+")");
- return 1;
+ src->WriteNumeric(ERR_RESTRICTED, memb->chan->name, "You are not permitted to kick services");
+ return MOD_RES_DENY;
}
- return 0;
+
+ return MOD_RES_PASSTHRU;
}
- virtual int OnWhoisLine(User* src, User* dst, int &numeric, std::string &text)
+ ModResult OnWhoisLine(Whois::Context& whois, Numeric::Numeric& numeric) CXX11_OVERRIDE
{
- return ((src != dst) && (numeric == 319) && dst->IsModeSet('k'));
+ return ((numeric.GetNumeric() == 319) && whois.GetTarget()->IsModeSet(bm)) ? MOD_RES_DENY : MOD_RES_PASSTHRU;
}
};
-
MODULE_INIT(ModuleServProtectMode)