/mandos/release

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/release

« back to all changes in this revision

Viewing changes to network-hooks.d/wireless

  • Committer: Teddy Hogeborn
  • Date: 2011-12-30 18:48:49 UTC
  • mto: (237.7.89 trunk)
  • mto: This revision was merged to the branch mainline in revision 290.
  • Revision ID: teddy@recompile.se-20111230184849-fvec587apz6j54pn
* plugins.d/mandos-client.c (run_network_hooks): Bug fix: setenv()
                                                 takes three
                                                 arguments.

Show diffs side-by-side

added added

removed removed

Lines of Context:
network-hooks.d/wireless
6
6
# configuration file(s) should be copied into the
7
7
# /etc/mandos/network-hooks.d directory.
8
8
# 
9
 
# Copyright © 2012 Teddy Hogeborn
10
 
# Copyright © 2012 Björn Påhlsson
11
 
# 
12
9
# Copying and distribution of this file, with or without modification,
13
10
# are permitted in any medium without royalty provided the copyright
14
11
# notice and this notice are preserved.  This file is offered as-is,
23
20
 
24
21
CONFIG="$MANDOSNETHOOKDIR/wireless.conf"
25
22
 
26
 
addrtoif(){
27
 
    grep -liFe "$1" /sys/class/net/*/address \
28
 
        | sed -e 's,.*/\([^/]*\)/[^/]*,\1,'
29
 
}
30
 
 
31
23
# Read config file
32
24
if [ -e "$CONFIG" ]; then
33
25
    . "$CONFIG"
35
27
    exit
36
28
fi
37
29
 
38
 
ifkeys=`sed -n -e 's/^ADDRESS_\([^=]*\)=.*/\1/p' "$CONFIG" | sort -u`
 
30
interfaces="`env|sed -n -e 's/^\(MODULE\|IPADDRS\|ROUTES\|WPA_DRIVER\)_\([^=]*\)=.*/\2/p' \"$CONFIG\" |sort -u`"
39
31
 
40
32
# Exit if DEVICE is set and is not any of the wireless interfaces
41
33
if [ -n "$DEVICE" ]; then
42
34
    while :; do
43
 
        for KEY in $ifkeys; do
44
 
            ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
45
 
            INTERFACE=`addrtoif "$ADDRESS"`
46
 
            if [ "$INTERFACE" = "$DEVICE" ]; then
 
35
        for IF in $interfaces; do
 
36
            if [ "$IF" = "$DEVICE" ]; then
47
37
                break 2
48
38
            fi
49
39
        done
72
62
    WPAS_OPTIONS="-P$PIDFILE $WPAS_OPTIONS"
73
63
fi
74
64
 
75
 
do_start(){
76
 
    mkdir -m u=rwx,go= -p "$CTRLDIR"
77
 
    "$wpa_supplicant" -B -g "$CTRL" -p "$CTRLDIR" $WPAS_OPTIONS
78
 
    for KEY in $ifkeys; do
79
 
        ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
80
 
        INTERFACE=`addrtoif "$ADDRESS"`
81
 
        DRIVER=`eval 'echo "$WPA_DRIVER_'"$KEY"\"`
82
 
        IFDELAY=`eval 'echo "$DELAY_'"$KEY"\"`
83
 
        "$wpa_cli" -g "$CTRL" interface_add "$INTERFACE" "" \
84
 
            "${DRIVER:-wext}" "$CTRLDIR" > /dev/null \
85
 
            | sed -e '/^OK$/d'
86
 
        NETWORK=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" add_network`
87
 
        eval wpa_interface_"$KEY"
88
 
        "$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" enable_network \
89
 
            "$NETWORK" | sed -e '/^OK$/d'
90
 
        sleep "${IFDELAY:-$DELAY}" &
91
 
        sleep=$!
92
 
        while :; do
93
 
            kill -0 $sleep 2>/dev/null || break
94
 
            STATE=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" status \
95
 
                | sed -n -e 's/^wpa_state=//p'`
96
 
            if [ "$STATE" = COMPLETED ]; then
97
 
                while :; do
98
 
                    kill -0 $sleep 2>/dev/null || break 2
99
 
                    UP=`cat /sys/class/net/"$INTERFACE"/operstate`
100
 
                    if [ "$UP" = up ]; then
101
 
                        kill $sleep 2>/dev/null
102
 
                        break 2
103
 
                    fi
104
 
                    sleep 1
105
 
                done
106
 
            fi
107
 
            sleep 1
108
 
        done &
109
 
        wait $sleep || :
110
 
        IPADDRS=`eval 'echo "$IPADDRS_'"$KEY"\"`
111
 
        if [ -n "$IPADDRS" ]; then
112
 
            if [ "$IPADDRS" = dhcp ]; then
113
 
                ipconfig -c dhcp -d "$INTERFACE" || :
114
 
                #dhclient "$INTERFACE"
115
 
            else
116
 
                for ipaddr in $IPADDRS; do
117
 
                    "$ip" addr add "$ipaddr" dev "$INTERFACE"
118
 
                done
119
 
            fi
120
 
        fi
121
 
        ROUTES=`eval 'echo "$ROUTES_'"$KEY"\"`
122
 
        if [ -n "$ROUTES" ]; then
123
 
            for route in $ROUTES; do
124
 
                "$ip" route add "$route" dev "$BRIDGE"
125
 
            done
126
 
        fi
127
 
    done
128
 
}
129
 
 
130
 
do_stop(){
131
 
    "$wpa_cli" -g "$CTRL" terminate 2>&1 | sed -e '/^OK$/d'
132
 
    for KEY in $ifkeys; do
133
 
        ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
134
 
        INTERFACE=`addrtoif "$ADDRESS"`
135
 
        "$ip" addr show scope global permanent dev "$INTERFACE" \
136
 
            | while read type addr rest; do
 
65
case "${MODE:-$1}" in
 
66
    start)
 
67
        mkdir -m u=rwx,go= -p "$CTRLDIR"
 
68
        "$wpa_supplicant" -B -g "$CTRL" -p "$CTRLDIR" $WPAS_OPTIONS
 
69
        for INTERFACE in $interfaces; do
 
70
            DRIVER=`eval 'echo "$WPA_DRIVER_'"$INTERFACE"\"`
 
71
            IFDELAY=`eval 'echo "$DELAY_'"$INTERFACE"\"`
 
72
            "$wpa_cli" -g "$CTRL" interface_add "$INTERFACE" "" \
 
73
                "${DRIVER:-wext}" "$CTRLDIR" > /dev/null \
 
74
                | sed -e '/^OK$/d'
 
75
            NETWORK=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" add_network`
 
76
            eval wpa_interface_"$INTERFACE"
 
77
            "$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" enable_network \
 
78
                "$NETWORK" | sed -e '/^OK$/d'
 
79
            sleep "${IFDELAY:-$DELAY}" &
 
80
            sleep=$!
 
81
            while :; do
 
82
                kill -0 $sleep 2>/dev/null || break
 
83
                STATE=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" status | sed -n -e 's/^wpa_state=//p'`
 
84
                if [ "$STATE" = COMPLETED ]; then
 
85
                    kill $sleep 2>/dev/null
 
86
                    break
 
87
                fi
 
88
                sleep 1
 
89
            done &
 
90
            wait $sleep || :
 
91
            IPADDRS=`eval 'echo "$IPADDRS_'"$INTERFACE"\"`
 
92
            if [ -n "$IPADDRS" ]; then
 
93
                if [ "$IPADDRS" = dhcp ]; then
 
94
                    ipconfig -c dhcp -d "$INTERFACE" || :
 
95
                    #dhclient "$INTERFACE"
 
96
                else
 
97
                    for ipaddr in $IPADDRS; do
 
98
                        "$ip" addr add "$ipaddr" dev "$INTERFACE"
 
99
                    done
 
100
                fi
 
101
            fi
 
102
            ROUTES=`eval 'echo "$ROUTES_'"$INTERFACE"\"`
 
103
            if [ -n "$ROUTES" ]; then
 
104
                for route in $ROUTES; do
 
105
                    "$ip" route add "$route" dev "$BRIDGE"
 
106
                done
 
107
            fi
 
108
        done
 
109
        ;;
 
110
    stop)
 
111
        "$wpa_cli" -g "$CTRL" terminate 2>&1 | sed -e '/^OK$/d'
 
112
        for INTERFACE in $interfaces; do
 
113
            "$ip" addr show scope global permanent dev "$INTERFACE" \
 
114
                | while read type addr rest; do
137
115
                case "$type" in
138
116
                    inet|inet6)
139
117
                        "$ip" addr del "$addr" dev "$INTERFACE"
140
118
                        ;;
141
119
                esac
142
120
            done
143
 
        "$ip" link set dev "$INTERFACE" down
144
 
    done
145
 
}
146
 
 
147
 
case "${MODE:-$1}" in
148
 
    start|stop)
149
 
        do_"${MODE:-$1}"
 
121
            "$ip" link set dev "$INTERFACE" down
 
122
        done
150
123
        ;;
151
124
    files)
152
125
        echo "$wpa_supplicant"