]>
Commit | Line | Data |
---|---|---|
1 | <chapter id="oprivs"> | |
2 | <title>Oper privileges</title> | |
3 | <sect1 id="oprivlist"> | |
4 | <title>Meanings of oper privileges</title> | |
5 | <para> | |
6 | These are flags in operator{}. | |
7 | The letter appears after opering up and in /stats o; an uppercase | |
8 | letter means the privilege is possessed, lowercase means it is not. | |
9 | </para> | |
10 | <sect2> | |
11 | <title>admin (A), server administrator</title> | |
12 | <para> | |
13 | Various privileges intended for server administrators. | |
14 | Among other things, this automatically sets umode +a and allows | |
15 | loading modules. | |
16 | </para> | |
17 | </sect2> | |
18 | <sect2> | |
19 | <title>remoteban (B), set remote bans</title> | |
20 | <para> | |
21 | This grants the ability to use the ON argument on KLINE/XLINE/RESV | |
22 | and UNKLINE/UNXLINE/UNRESV to set and unset bans on other servers, | |
23 | and the server argument on REHASH. | |
24 | This is only allowed if the oper may perform the action locally, | |
25 | and if the remote server has a shared{} block. | |
26 | </para> | |
27 | <note><para> | |
28 | If a cluster{} block is present, bans are sent remotely even | |
29 | if the oper does not have remoteban privilege. | |
30 | </para></note> | |
31 | </sect2> | |
32 | <sect2> | |
33 | <title>local_kill (C), kill local users</title> | |
34 | <para> | |
35 | This grants permission to use KILL on users on the same server, | |
36 | disconnecting them from the network. | |
37 | </para> | |
38 | </sect2> | |
39 | <sect2> | |
40 | <title>die (D), die and restart</title> | |
41 | <para> | |
42 | This grants permission to use DIE and RESTART, shutting down | |
43 | or restarting the server. | |
44 | </para> | |
45 | </sect2> | |
46 | <sect2> | |
47 | <title>gline (G), gline</title> | |
48 | <para> | |
49 | This allows using GLINE (network wide temp bans if 3 opers agree). | |
50 | If unkline privilege is also possessed, allow UNGLINE (remove gline | |
51 | locally). | |
52 | </para> | |
53 | </sect2> | |
54 | <sect2> | |
55 | <title>rehash (H), rehash</title> | |
56 | <para> | |
57 | Allows using the REHASH command, to rehash various configuration | |
58 | files or clear certain lists. | |
59 | </para> | |
60 | </sect2> | |
61 | <sect2> | |
62 | <title>kline (K), kline and dline</title> | |
63 | <para> | |
64 | Allows using KLINE and DLINE, to ban users by user@host mask | |
65 | or IP address. | |
66 | </para> | |
67 | </sect2> | |
68 | <sect2> | |
69 | <title>operwall (L), send/receive operwall</title> | |
70 | <para> | |
71 | Allows using the OPERWALL command and umode +z to send and | |
72 | receive operwalls. | |
73 | </para> | |
74 | </sect2> | |
75 | <sect2> | |
76 | <title>nick_changes (N), see nick changes</title> | |
77 | <para> | |
78 | Allows using snomask +n to see local client nick changes. | |
79 | This is designed for monitor bots. | |
80 | </para> | |
81 | </sect2> | |
82 | <sect2> | |
83 | <title>global_kill (O), global kill</title> | |
84 | <para> | |
85 | Allows using KILL on users on any server. | |
86 | </para> | |
87 | </sect2> | |
88 | <sect2> | |
89 | <title>hidden_oper (P), hide from /stats p</title> | |
90 | <para> | |
91 | This privilege currently does nothing, but was designed | |
92 | to hide bots from /stats p so users will not message them | |
93 | for help. | |
94 | </para> | |
95 | </sect2> | |
96 | <sect2> | |
97 | <title>resv (Q), channel control</title> | |
98 | <para> | |
99 | This allows using /resv, /unresv and changing the channel | |
100 | modes +L and +P. | |
101 | </para> | |
102 | </sect2> | |
103 | <sect2> | |
104 | <title>remote (R), remote routing</title> | |
105 | <para> | |
106 | This allows using the third argument of the CONNECT command, to | |
107 | instruct another server to connect somewhere, and using SQUIT | |
108 | with an argument that is not locally connected. | |
109 | (In both cases all opers with +w set will be notified.) | |
110 | </para> | |
111 | </sect2> | |
112 | <sect2> | |
113 | <title>oper_spy (S), use operspy</title> | |
114 | <para> | |
115 | This allows using /mode !#channel, /whois !nick, /who !#channel, | |
116 | /chantrace !#channel, /who !mask, /masktrace !user@host :gecos | |
117 | and /scan umodes +modes-modes global list to see through secret | |
118 | channels, invisible users, etc. | |
119 | </para> | |
120 | <para> | |
121 | All operspy usage is broadcasted to opers with snomask +Z set | |
122 | (on the entire network) and optionally logged. | |
123 | If you grant this to anyone, it is a good idea to establish | |
124 | concrete policies describing what it is to be used for, and | |
125 | what not. | |
126 | </para> | |
127 | <para> | |
128 | If operspy_dont_care_user_info is enabled, /who mask is operspy | |
129 | also, and /who !mask, /who mask, /masktrace !user@host :gecos | |
130 | and /scan umodes +modes-modes global list do not generate +Z notices | |
131 | or logs. | |
132 | </para> | |
133 | </sect2> | |
134 | <sect2> | |
135 | <title>unkline (U), unkline</title> | |
136 | <para> | |
137 | Allows using UNKLINE and UNDLINE, and if gline privilege is also | |
138 | possessed, UNGLINE. | |
139 | </para> | |
140 | </sect2> | |
141 | <sect2> | |
142 | <title>xline (X), xline and unxline</title> | |
143 | <para> | |
144 | Allows using XLINE and UNXLINE, to ban/unban users by realname. | |
145 | </para> | |
146 | </sect2> | |
147 | <sect2> | |
148 | <title>hidden_admin, hidden administrator</title> | |
149 | <para> | |
150 | This grants everything granted to the admin privilege, | |
151 | except the ability to set umode +a. If both admin and hidden_admin | |
152 | are possessed, umode +a can still not be used. | |
153 | </para> | |
154 | <note><para> | |
155 | This privilege does not appear in /stats o or oper up notices. | |
156 | </para></note> | |
157 | </sect2> | |
158 | </sect1> | |
159 | </chapter> | |
160 | <!-- Keep this comment at the end of the file | |
161 | Local variables: | |
162 | mode: sgml | |
163 | sgml-omittag:t | |
164 | sgml-shorttag:t | |
165 | sgml-namecase-general:t | |
166 | sgml-general-insert-case:lower | |
167 | sgml-minimize-attributes:nil | |
168 | sgml-always-quote-attributes:t | |
169 | sgml-indent-step:2 | |
170 | sgml-indent-data:t | |
171 | sgml-parent-document: ("charybdis-oper-guide.sgml" "book") | |
172 | sgml-exposed-tags:nil | |
173 | fill-column: 105 | |
174 | sgml-validate-command: "nsgmls -e -g -s -u charybdis-oper-guide.sgml" | |
175 | End: | |
176 | --> |