3
# This is an example of a Mandos client network hook. This hook
4
# brings up a wireless interface as specified in a separate
5
# configuration file. To be used, this file and any needed
6
# configuration file(s) should be copied into the
7
# /etc/mandos/network-hooks.d directory.
9
# Copyright © 2012 Teddy Hogeborn
10
# Copyright © 2012 Björn Påhlsson
12
# Copying and distribution of this file, with or without modification,
13
# are permitted in any medium without royalty provided the copyright
14
# notice and this notice are preserved. This file is offered as-is,
15
# without any warranty.
20
CTRL="$RUNDIR/wpa_supplicant-global"
21
CTRLDIR="$RUNDIR/wpa_supplicant"
22
PIDFILE="$RUNDIR/wpa_supplicant-mandos.pid"
24
CONFIG="$MANDOSNETHOOKDIR/wireless.conf"
27
grep -liFe "$1" /sys/class/net/*/address \
28
| sed -e 's,.*/\([^/]*\)/[^/]*,\1,'
32
if [ -e "$CONFIG" ]; then
38
ifkeys=`sed -n -e 's/^ADDRESS_\([^=]*\)=.*/\1/p' "$CONFIG" | sort -u`
40
# Exit if DEVICE is set and is not any of the wireless interfaces
41
if [ -n "$DEVICE" ]; then
43
for KEY in $ifkeys; do
44
ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
45
INTERFACE=`addrtoif "$ADDRESS"`
46
if [ "$INTERFACE" = "$DEVICE" ]; then
54
wpa_supplicant=/sbin/wpa_supplicant
58
# Used by the wpa_interface_* functions in the wireless.conf file
61
ssid|psk) arg="\"$2\"" ;;
64
"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" set_network "$NETWORK" \
65
"$1" "$arg" 2>&1 | sed -e '/^OK$/d'
68
if [ $VERBOSITY -gt 0 ]; then
69
WPAS_OPTIONS="-d $WPAS_OPTIONS"
71
if [ -n "$PIDFILE" ]; then
72
WPAS_OPTIONS="-P$PIDFILE $WPAS_OPTIONS"
76
mkdir -m u=rwx,go= -p "$CTRLDIR"
77
"$wpa_supplicant" -B -g "$CTRL" -p "$CTRLDIR" $WPAS_OPTIONS
78
for KEY in $ifkeys; do
79
ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
80
INTERFACE=`addrtoif "$ADDRESS"`
81
DRIVER=`eval 'echo "$WPA_DRIVER_'"$KEY"\"`
82
IFDELAY=`eval 'echo "$DELAY_'"$KEY"\"`
83
"$wpa_cli" -g "$CTRL" interface_add "$INTERFACE" "" \
84
"${DRIVER:-wext}" "$CTRLDIR" > /dev/null \
86
NETWORK=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" add_network`
87
eval wpa_interface_"$KEY"
88
"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" enable_network \
89
"$NETWORK" | sed -e '/^OK$/d'
90
sleep "${IFDELAY:-$DELAY}" &
93
kill -0 $sleep 2>/dev/null || break
94
STATE=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" status \
95
| sed -n -e 's/^wpa_state=//p'`
96
if [ "$STATE" = COMPLETED ]; then
98
kill -0 $sleep 2>/dev/null || break 2
99
UP=`cat /sys/class/net/"$INTERFACE"/operstate`
100
if [ "$UP" = up ]; then
101
kill $sleep 2>/dev/null
110
IPADDRS=`eval 'echo "$IPADDRS_'"$KEY"\"`
111
if [ -n "$IPADDRS" ]; then
112
if [ "$IPADDRS" = dhcp ]; then
113
ipconfig -c dhcp -d "$INTERFACE" || :
114
#dhclient "$INTERFACE"
116
for ipaddr in $IPADDRS; do
117
"$ip" addr add "$ipaddr" dev "$INTERFACE"
121
ROUTES=`eval 'echo "$ROUTES_'"$KEY"\"`
122
if [ -n "$ROUTES" ]; then
123
for route in $ROUTES; do
124
"$ip" route add "$route" dev "$BRIDGE"
131
"$wpa_cli" -g "$CTRL" terminate 2>&1 | sed -e '/^OK$/d'
132
for KEY in $ifkeys; do
133
ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
134
INTERFACE=`addrtoif "$ADDRESS"`
135
"$ip" addr show scope global permanent dev "$INTERFACE" \
136
| while read type addr rest; do
139
"$ip" addr del "$addr" dev "$INTERFACE"
143
"$ip" link set dev "$INTERFACE" down
147
case "${MODE:-$1}" in
152
echo "$wpa_supplicant"
157
if [ "$IPADDRS" = dhcp ]; then
160
sed -n -e 's/#.*$//' -e 's/[ ]*$//' \
161
-e 's/^MODULE_[^=]\+=//p' "$CONFIG"
added
removed
network-hooks.d/wireless
