software/!RELEASES/ircservices/achurch.org/services/lists/ircservices/2007/005228.html

   1 <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
   2 <HTML>
   3  <HEAD>
   4    <TITLE> [IRCServices] Regarding Founder Passwords
   5    </TITLE>
   6    <LINK REL="Index" HREF="index.html" >
   7    <LINK REL="made" HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Regarding%20Founder%20Passwords&In-Reply-To=ce6d53600703231023y1677d0fbue43e3d1378805fb9%40mail.gmail.com">
   8    <META NAME="robots" CONTENT="index,nofollow">
   9    <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
  10    <LINK REL="Previous"  HREF="005227.html">
  11    <LINK REL="Next"  HREF="005223.html">
  12  </HEAD>
  13  <BODY BGCOLOR="#ffffff">
  14    <H1>[IRCServices] Regarding Founder Passwords</H1>
  15     <B>Andrew Church</B>
  16     <A HREF="mailto:ircservices%40ircservices.za.net?Subject=%5BIRCServices%5D%20Regarding%20Founder%20Passwords&In-Reply-To=ce6d53600703231023y1677d0fbue43e3d1378805fb9%40mail.gmail.com"
  17        TITLE="[IRCServices] Regarding Founder Passwords">achurch at achurch.org
  18        </A><BR>
  19     <I>Sat Mar 24 02:29:45 PDT 2007</I>
  20     <P><UL>
  21         <LI>Previous message: <A HREF="005227.html">[IRCServices] Regarding Founder Passwords
  22 </A></li>
  23         <LI>Next message: <A HREF="005223.html">[IRCServices] services panic
  24 </A></li>
  25          <LI> <B>Messages sorted by:</B>
  26               <a href="date.html#5228">[ date ]</a>
  27               <a href="thread.html#5228">[ thread ]</a>
  28               <a href="subject.html#5228">[ subject ]</a>
  29               <a href="author.html#5228">[ author ]</a>
  30          </LI>
  31        </UL>
  32     <HR>
  33 <!--beginarticle-->
  34 <PRE>&gt;<i>So, if your founder password ever gets compromised, no matter how many
  35 </I>&gt;<i>times you change it, if there are other persons who identified for
  36 </I>&gt;<i>that channel, they will stay identified and will be able to request
  37 </I>&gt;<i>the new password be sent to their emails?
  38 </I>
  39      That's correct with respect to Services 5.0.  The SENDPASS feature
  40 has been dropped from Services 5.1 so that particular problem is no longer
  41 an issue.  You do, however, raise a valid point with respect to users who
  42 remain connected to the network, and I have changed ChanServ SET PASSWORD
  43 in 5.1 to clear founder privileges from all users except the one setting
  44 the password (see patch below, which may also work with 5.0 but hasn't
  45 been tested--I'll look into including this in 5.0 as well).
  46
  47   --Andrew Church
  48     <A HREF="http://lists.ircservices.za.net/mailman/listinfo/ircservices">achurch at achurch.org</A>
  49     <A HREF="http://achurch.org/">http://achurch.org/</A>
  50
  51 Index: modules/chanserv/set.c
  52 ===================================================================
  53 RCS file: /var/local/cvsroot/ircservices/modules/chanserv/set.c,v
  54 retrieving revision 2.66
  55 diff -u -r2.66 set.c
  56 --- modules/chanserv/set.c      16 Feb 2007 12:49:31 -0000      2.66
  57 +++ modules/chanserv/set.c      23 Mar 2007 17:44:52 -0000
  58 @@ -334,6 +334,7 @@
  59  static void do_set_password(User *u, ChannelInfo *ci, char *param)
  60  {
  61      Password passbuf;
  62 +    User *u2;
  63
  64      if (stricmp(param, ci-&gt;name) == 0
  65       || stricmp(param, ci-&gt;name+1) == 0
  66 @@ -363,6 +364,19 @@
  67          module_log(&quot;%s!%s@%s set password as Services admin for %s&quot;,
  68                     u-&gt;nick, u-&gt;username, u-&gt;host, ci-&gt;name);
  69      }
  70 +    /* Clear founder privileges from all other users who might have
  71 +     * identified earlier. */
  72 +    for (u2 = first_user(); u2; u2 = next_user()) {
  73 +        if (u2 != u) {
  74 +            struct u_chaninfolist *c, *c2;
  75 +            LIST_FOREACH_SAFE (c, u2-&gt;id_chans, c2) {
  76 +                if (irc_stricmp(c-&gt;chan, ci-&gt;name) == 0) {
  77 +                    LIST_REMOVE(c, u2-&gt;id_chans);
  78 +                    free(c);
  79 +                }
  80 +            }
  81 +        }
  82 +    }
  83  }
  84
  85  /*************************************************************************/
  86 </PRE>
  87
  88 <!--endarticle-->
  89     <HR>
  90     <P><UL>
  91         <!--threads-->
  92         <LI>Previous message: <A HREF="005227.html">[IRCServices] Regarding Founder Passwords
  93 </A></li>
  94         <LI>Next message: <A HREF="005223.html">[IRCServices] services panic
  95 </A></li>
  96          <LI> <B>Messages sorted by:</B>
  97               <a href="date.html#5228">[ date ]</a>
  98               <a href="thread.html#5228">[ thread ]</a>
  99               <a href="subject.html#5228">[ subject ]</a>
 100               <a href="author.html#5228">[ author ]</a>
 101          </LI>
 102        </UL>
 103
 104 </body></html>