fedserv/echo
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Stop a non-founder from granting the founder flag (channel takeover escalation)

Browse source
This commit is contained in:
Jean Chevronnet 2026-07-19 13:10:44 +00:00
parent 18806c5fe7
commit e7f012726c
No known key found for this signature in database
2 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
modules/chanserv/src/flags.rs
View file

@ -56,6 +56,13 @@ pub fn handle(me: &str, from: &Sender, chan: &str, args: &[&str], ctx: &mut Serv
return;
}
};
// The `a` flag delegates access-list management, but only the founder may grant
// `f` (founder/co-founder) — otherwise a delegate could mint a founder-equivalent
// entry (Rank::Founder) and seize the channel.
if !is_founder && updated.has(echo_api::Flag::Founder) {
ctx.notice(me, from.uid, format!("Only the founder can grant the \x02f\x02 flag on \x02{chan}\x02."));
return;
}
if updated.is_empty() {
match db.access_del(chan, target) {
Ok(true) => ctx.notice(me, from.uid, format!("Cleared \x02{target}\x02's access to \x02{chan}\x02.")),