From 4066320bfda7d0351dc8c3eeac50e45a6464bcc9 Mon Sep 17 00:00:00 2001 From: xfnw Date: Mon, 4 Jul 2022 19:15:17 -0400 Subject: [PATCH] modify privsets create feesh privset with permissions for making announcements move rehash permission from jellyfish to wombat, its not much of an attack vector --- ircd.j2 | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/ircd.j2 b/ircd.j2 index 5f4ce52..3080465 100644 --- a/ircd.j2 +++ b/ircd.j2 @@ -73,13 +73,18 @@ listen { privset "wombat" { privs = oper:general, oper:kline, oper:unkline, oper:xline, oper:kill, oper:testline, - oper:privs, oper:resv, oper:cmodes, oper:mass_notice, oper:remoteban, usermode:helpops, + oper:privs, oper:resv, oper:cmodes, oper:rehash, oper:remoteban, usermode:helpops, oper:message, oper:operwall, auspex:oper, auspex:hostname, auspex:umodes, - auspex:cmodes, oper:receive_immunity, oper:wallops; + auspex:cmodes, oper:receive_immunity; +}; + +privset "feesh" { + extends = "wombat"; + privs = oper:mass_notice, oper:wallops; }; privset "dingo" { - extends = "wombat"; + extends = "feesh"; privs = oper:override, oper:ojoin, oper:dehelper, usermode:servnotice; }; @@ -96,7 +101,7 @@ privset "bandicoot" { privset "jellyfish" { extends = "bandicoot"; - privs = oper:admin, oper:die, oper:rehash, oper:spy, oper:grant; + privs = oper:admin, oper:die, oper:spy, oper:grant; }; {% include 'operator.j2' %}