- Sep 05, 2003
- Sep 04, 2003
-
-
rswindell authored
-
rswindell authored
Added Native=Yes to sz/rz/gkermit configurations.
-
rswindell authored
-
rswindell authored
-
rswindell authored
-
deuce authored
-
cyan authored
Servers now use auto-reconnect frequency as defined on their configured Y:Line, STATS I for viewing I:Lines works.
-
cyan authored
Give opers their class as defined on the O:Line when going umode +o Close all client connections when the ircd becomes terminated. Changed all server_wallops to their proper Bahamut counterparts. Not all oper notices are global anymore, and fixed handling of KILL messages. Added LOCOPS as per Bahamut in anticipation of proper GLOBOPS and CHATOPS.
-
deuce authored
from header IPs against the DNS blacklists. Most people won't want to use this.
-
rswindell authored
-
deuce authored
-
- Sep 03, 2003
-
-
deuce authored
-
deuce authored
-
runderwo authored
Fix stupid paren error.
-
rswindell authored
if the length (after stripping invalid chars) is greater than LEN_CODE (8).
-
rswindell authored
codes, then truncates to valid length (8 chars) - use maximum number of chars for increased uniqueness.
-
rswindell authored
imported internal codes by stripping illegal filename chars.
-
deuce authored
enabled in your kernel and be writeable by the uid/gid the BBS runs as.
-
runderwo authored
Cleanups; replace access() with fexist() and fix erroneous comparisons.
-
rswindell authored
a few for loops. Requires cvs update in src/xpdev directory.
-
rswindell authored
of FIND/SKIP char/charset macros (for parsing ASCIIZ char* lines).
-
runderwo authored
Changed 'disclaimer' handling to use ftouch() instead.
-
- Sep 02, 2003
-
-
rswindell authored
search_nickbuf() search loop stops at last element in history array (no need to compare elements that don't exist).
-
deuce authored
-
deuce authored
-
cyan authored
properly across servers.
-
deuce authored
-
deuce authored
to track down the issue, I finally gave up... as a result, there is a new feature! Linux will no longer completely drop it's root privs (It never really did anyways, and you couldn't possibly make it... but now it does so even less) As a result, Linux can now recycle all servers when running as non-root. From a security standpoint, doing this is more secure than running as root, but less secure than the behaviour on POSIX.4 compliant pthreads. Running the BBS as root means that if a user can create a file with the name of his choice, or pass *any* command through to a shell, that user will get root access to the machine. Using the new behaviour, the user would need to trick the Synchronet binary itself into executing arbitrary and specially crafted code... probobly using the dreaded buffer overflow... of which there are probobly some in the web server code. :-) If the user can do this much more tricky feat, then the user gets root privs. If not, the user will have to find something else to exploit on your system. Knowing that some *BSD users (surely not OpenBSD users though) will want to trade security for convenience, I stole a page out of the Sendmail book and implemented a "DONT_BLAME_SYNCHRONET" make option. Compiling like this: gmake DONT_BLAME_SYNCHRONET=1 Will implement this same behaviour on non-Linux platforms. Allowing this partial security feature.
-
- Sep 01, 2003
-
-
rswindell authored
-
- Aug 31, 2003
-
-
cyan authored
Support user PASS command to check vs. local synchronet db, global notices for opers, fixed bug with netwide TOPIC displaying server name instead of nick, TOPIC wasn't propagating beyond servers 1 hop deep, support nick hunting as per RFC1459, nick TS was incorrect, fixed reading of null line from config as per Deuce, WALLOPS wasn't propagating properly, began work on server-to-server numeric passing (ala VERSION), searchbyserver accepts wildcards and nicknames as valid server targets, an oper who SQUITs their uplink gets QUIT from it as per normal :)
-
- Aug 30, 2003