View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0001909 | unreal | ircd | public | 2004-07-01 08:27 | 2004-11-25 00:36 |
| Reporter | ObiWan | Assigned To | |||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | open | ||
| Product Version | 3.2 | ||||
| Summary | 0001909: Can't override +n in Channels | ||||
| Description | I tried to oper up and to send messages from outside into a channel which has +n. It won't work I get #test No external channel messages (#test) | ||||
| Steps To Reproduce | If you want to reproduce it just oper up and then do /msg #channel text into a channel which has n enabled without joining it. | ||||
| 3rd party modules | |||||
|
|
This got removed, I think it worked in early beta versions. |
|
|
I think it would be quite useful if it worked. For example: I've got an eggdrop. I don't want to join it in every channel. So people could just send a msg or notice and the eggdrop posts a message into the given channel without having to join the channel. |
|
|
an U:Lined server/client can override +n use the m_uline modul (www.angrywolf.org/m_uline.c) |
|
|
I think that would be quite mad to give a normal user, certainly an eggdrop uline because if someone hacks the eggdrop he would have in a way complete control over the network. |
|
|
the uline module is a great administration tool, but definitely for administrators only.... it causes the U:Lined user to be able to perform ANY command without error or argument from the server... U:Lines can do even more than a NetAdmin, so be careful :) :) :) as for overriding +n on a channel, can't Network Admins override that? I haven't tested that, but they can override usermode +Sq, so try that :) |
|
|
ObiWan, you say it is insane to give an eggdrop U:line access, but most people would say giving an eggdrop oper access is insane! I'd include myself in that group, for the same reason you mentioned with U:lines. If someone gains access to the eggdrop, they have oper access. And don't think eggdrops are the most secure things in the world. http://www.securityfocus.com/archive/1/353181/2004-02-07/2004-02-13/0 that's an example that would allow someone who has a linked bot to gain full access to your bot. So it is possible. Therefore, I really have no intention of adding a feature that will be used by eggdrops as opers. Now, if you can supply another reason why this would be useful, then perhaps I'll consider it. |
|
|
I don't think that eggdrops are secure but it is much more secure to give an eggdrop a limited oper access (no routing, no glining, no killing, etc) than giving an eggdrop a Uline. |
|
|
dosent have to be an eggdrop, how about a mirc script? |
|
|
You can't be serious... A mIRC script isn't exactly secure either (sometimes even if you're really careful). |
|
|
Very well then, say a purpose built automaton of some kind that can only be interacted with on the command line? Secure unless someone gets into your OS... |
|
|
unless your really stupid... a mirc script is pretty secure... |
|
|
[quote]unless your really stupid... a mirc script is pretty secure... [/quote] Then I guess mIRC scripters are pretty stupid, because I've found *dozens* of security exploits in scripts. Sometimes 5-6 in one script! mIRC makes it *incredibly* easy to make a mistake that causes remote execution. You use a $eval somewhere that you shouldn't, and suddenly they can change everything your script does. The recent exploit found in PnP, arguably the most secure/respected mIRC script out there, was just such an issue. mIRC is a language that is designed in such a way that it has NO security. It promotes allowing users to accidentily create exploits. It's just the way the language is designed. So either most mIRC scripters are stupid, or mIRC scripting isn't as secure as you say. |
|
|
I thought you just needed operoverride to send to +n channels, works fine here as a netadmin sending to a +n channel on unreal 3.2.1 |
|
|
You sure about that, Plasma? Server: Unreal3.2.1. <servername> FhiXOoZE Modes: +owghraAsxNWqt OperFlags: rDRhgwlcLkKbBnGAaNWHtZv -> *#Channel* test = #Channel No external channel messages (#Channel) Diagnosis: Cannot override +n Hint: You need to be U:Lined to override +n [source] member = IsMember(cptr, chptr); if (chptr->mode.mode & MODE_NOPRIVMSGS && !member) return (CANNOT_SEND_NOPRIVMSGS); [/source] [translation] If channel mode +n is set AND you are not in the room then send you error that you cannot talk there [/translation] edited on: 2004-10-24 20:25 |
|
|
My bad, looks like you cant :) |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2004-07-01 08:27 | ObiWan | New Issue | |
| 2004-07-01 12:44 | Rocko | Note Added: 0006825 | |
| 2004-07-01 12:55 | ObiWan | Note Added: 0006827 | |
| 2004-07-01 13:34 | DukePyrolator | Note Added: 0006831 | |
| 2004-07-01 13:39 | ObiWan | Note Added: 0006832 | |
| 2004-07-06 22:05 | Zell | Note Added: 0006910 | |
| 2004-07-06 23:52 |
|
Note Added: 0006916 | |
| 2004-07-07 01:50 | ObiWan | Note Added: 0006918 | |
| 2004-10-03 10:32 | Neo-Vortex | Note Added: 0007859 | |
| 2004-10-03 15:57 | aquanight | Note Added: 0007864 | |
| 2004-10-04 11:00 | w00t | Note Added: 0007869 | |
| 2004-10-04 11:45 | Neo-Vortex | Note Added: 0007870 | |
| 2004-10-04 17:58 |
|
Note Added: 0007874 | |
| 2004-10-24 00:11 | Plasma | Note Added: 0008096 | |
| 2004-10-24 20:22 | Zell | Note Added: 0008102 | |
| 2004-10-24 20:25 | Zell | Note Edited: 0008102 | |
| 2004-10-24 20:46 | Plasma | Note Added: 0008103 | |
| 2004-11-25 00:36 |
|
Status | new => closed |
