atheme/modules/ at master · snowfields.name/atheme · Tangled

snowfields.name / atheme

0

[READ-ONLY] Mirror of https://github.com/VibeDevelopers/atheme. Modified fork of atheme IRC Services www.vibetalk.net/

0

atheme / modules /

at master 27 folders 1 file

TwinUsers removed owner/protect - Comet doesn't support it 5d ago

ALIS: Allow filtering channels by registered/unregistered status

2 years ago

Update my e-mail address

5 years ago

Avoid year-2038-problem This patch was done while reviewing potential year-2038 issues in openSUSE.

3 weeks ago

Update my e-mail address

5 years ago

Avoid year-2038-problem This patch was done while reviewing potential year-2038 issues in openSUSE.

3 weeks ago

removed owner/protect - Comet doesn't support it

5 days ago

point modules/contrib to VibeDevelopers fork and bump to latest HEAD

3 weeks ago

modules/crypto/pbkdf2v2: remove unnecessary confhook dispatch This has not been necessary since commit 9d8d2279841f0076ff4c

2 years ago

Update my e-mail address

5 years ago

modules/gameserv/dice: correct parsing of number of executions If you give 2 parameters to `CALC`, the first one is supposed to determine the number of times the expression (in the second parameter) is executed. This is useful when the expression includes a dice roll operator for example. The previous code simply used the value of configuration parameter `gameserv::max_rolls` if this could not be parsed as an integer, which defaults to 10. Correct the parsing code to return an error if the first parameter is not a positive integer.

3 weeks ago

Update my e-mail address

5 years ago

atheme.conf: add facility for default group flags This mirrors the defuflags (for accounts) and defcflags (for channels) options.

3 weeks ago

Update my e-mail address

5 years ago

Avoid year-2038-problem This patch was done while reviewing potential year-2038 issues in openSUSE.

3 weeks ago

Update my e-mail address

5 years ago

Update my e-mail address

5 years ago

Make login failure notices opt-in and add password-based login throttling functionality (#884) * Make login failure notices opt-in This introduces a new account flag which determines whether notices about failed password-based login attempts are generated or not. * Hook: user_can_login: Indicate login method This allows hooks to permit or deny logins based upon the type of credential being used. This requires some rework of how SASLServ behaves. Specifically, mechanism modules now indicate their login type at the point where the hook is called, not when the mechanism is registered. At the moment, there are four types of login credential: - Certificate Fingerprints - User introduction (not logged in, but has a certfp) - SASL EXTERNAL - Passwords - NickServ IDENTIFY - SASL PLAIN - SASL SCRAM - Public-key Challenges - SASL ECDSA-NIST256P-CHALLENGE - SASL ECDH-X25519-CHALLENGE - Tokens - SASL AUTHCOOKIE * Add a password-based login throttling module Co-authored-by: jesopo <github@lolnerd.net>

3 years ago

typo

3 weeks ago

modules/operserv/mode: check whether argument adds or removes modes channel_mode() was written in a fragile manner such that it assumes its input is from an IRCd and is trustworthy and well-formed. It is also not capable of reporting an error condition back to its caller. Ordinarily this would be okay; we have to trust our uplink after all, and if it's feeding us malicious protocol data, all hope of maintaining a sensible state of the network is already lost. However, the OS MODE module allows humans to feed arbitrary data into it, and if you forget to prefix that data with + or -, the results can vary from unintentional removal of channel modes [1] to a desync [2]. This is because channel_mode() assumes that if the mode direction is not ADD, it must be DEL; and it looks for a + or - to switch it into ADD or DEL state but starts out in neither of these states. There's nothing we can do in the short term to protect services and the network against malicious operators, but we can protect operators from making this trivial data entry mistake. [1] Executing e.g. "/OS MODE #foo o bar" will (instead of opping bar) deop bar, whether or not bar is opped. This will not corrupt any channel state but is unintuitive and undesirable behaviour. [2] Executing e.g. "/OS MODE #foo i" will convince services that the channel is no longer cmode +i but will not send out a MODE -i to the network because modestack_add_simple() will ignore (and complain about) an invalid mode direction. Reported-By: glguy (Libera.Chat)

2 years ago

removed owner/protect - Comet doesn't support it

5 days ago

proxyscan/dnsbl: add IPv6 support (#878) This does make the codebase now depend upon inet_pton(3), which is pretty much universally available.

3 years ago

Update my e-mail address

5 years ago

modules/saslserv/scram: allow advertised mechanisms to be restricted Network management may only ever commit to supporting one or a smaller number of digests, and not want to advertise all mechanisms.

2 years ago

Update my e-mail address

5 years ago

Update my e-mail address

5 years ago

Update my e-mail address

5 years ago

modules/transport/xmlrpc: add ability to log IPs interactively The log messages created by logcommand() (used by modules that handle commands, such as NickServ VERIFY) do not contain the IP address when the log target is an IRC channel. It would be useful to have the option to log them when the command is executed via an RPC request, so provide a function that formats the prefix of log messages for commands executed via RPC requests and have that function optionally include the IP address if desired.

3 weeks ago

removed owner/protect - Comet doesn't support it

5 days ago