/mandos/trunk

#!/bin/sh

#

# This is an example of a Mandos client network hook.  This hook

# brings up a wireless interface as specified in a separate

# configuration file.  To be used, this file and any needed

# configuration file(s) should be copied into the

# /etc/mandos/network-hooks.d directory.

# 

# Copying and distribution of this file, with or without modification,

# are permitted in any medium without royalty provided the copyright

# notice and this notice are preserved.  This file is offered as-is,

# without any warranty.

set -e

RUNDIR="/run"

CTRL="$RUNDIR/wpa_supplicant-global"

CTRLDIR="$RUNDIR/wpa_supplicant"

PIDFILE="$RUNDIR/wpa_supplicant-mandos.pid"

CONFIG="$MANDOSNETHOOKDIR/wireless.conf"

addrtoif(){

    grep -liFe "$1" /sys/class/net/*/address | sed -e 's,.*/\([^/]*\)/[^/]*,\1,'

}

# Read config file

if [ -e "$CONFIG" ]; then

    . "$CONFIG"

else

    exit

fi

ifkeys="`env | sed -n -e 's/^ADDRESS_\([^=]*\)=.*/\1/p' \"$CONFIG\" | sort -u`"

# Exit if DEVICE is set and is not any of the wireless interfaces

if [ -n "$DEVICE" ]; then

    while :; do

	for KEY in $ifkeys; do

	    ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`

	    INTERFACE=`addrtoif "$ADDRESS"`

	    if [ "$INTERFACE" = "$DEVICE" ]; then

		break 2

	    fi

	done

	exit

    done

fi

wpa_supplicant=/sbin/wpa_supplicant

wpa_cli=/sbin/wpa_cli

ip=/bin/ip

# Used by the wpa_interface_* functions in the wireless.conf file

wpa_cli_set(){

    case "$1" in

        ssid|psk) arg="\"$2\"" ;;

        *) arg="$2" ;;

    esac

    "$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" set_network "$NETWORK" \

	"$1" "$arg" 2>&1 | sed -e '/^OK$/d'

}

if [ $VERBOSITY -gt 0 ]; then

    WPAS_OPTIONS="-d $WPAS_OPTIONS"

fi

if [ -n "$PIDFILE" ]; then

    WPAS_OPTIONS="-P$PIDFILE $WPAS_OPTIONS"

fi

case "${MODE:-$1}" in

    start)

	mkdir -m u=rwx,go= -p "$CTRLDIR"

	"$wpa_supplicant" -B -g "$CTRL" -p "$CTRLDIR" $WPAS_OPTIONS

        for KEY in $ifkeys; do

	    ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`

	    INTERFACE=`addrtoif "$ADDRESS"`

	    DRIVER=`eval 'echo "$WPA_DRIVER_'"$KEY"\"`

	    IFDELAY=`eval 'echo "$DELAY_'"$KEY"\"`

	    "$wpa_cli" -g "$CTRL" interface_add "$INTERFACE" "" \

		"${DRIVER:-wext}" "$CTRLDIR" > /dev/null \

		| sed -e '/^OK$/d'

	    NETWORK=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" add_network`

	    eval wpa_interface_"$KEY"

	    "$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" enable_network \

		"$NETWORK" | sed -e '/^OK$/d'

	    sleep "${IFDELAY:-$DELAY}" &

	    sleep=$!

	    while :; do

		kill -0 $sleep 2>/dev/null || break

		STATE=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" status | sed -n -e 's/^wpa_state=//p'`

		if [ "$STATE" = COMPLETED ]; then

		    while :; do

			kill -0 $sleep 2>/dev/null || break 2

			UP=`cat /sys/class/net/"$INTERFACE"/operstate`

			if [ "$UP" = up ]; then

			    kill $sleep 2>/dev/null

			    break 2

			fi

			sleep 1

		    done

		fi

		sleep 1

	    done &

	    wait $sleep || :

	    IPADDRS=`eval 'echo "$IPADDRS_'"$KEY"\"`

	    if [ -n "$IPADDRS" ]; then

		if [ "$IPADDRS" = dhcp ]; then

		    ipconfig -c dhcp -d "$INTERFACE" || :

		    #dhclient "$INTERFACE"

		else

		    for ipaddr in $IPADDRS; do

			"$ip" addr add "$ipaddr" dev "$INTERFACE"

		    done

		fi

	    fi

	    ROUTES=`eval 'echo "$ROUTES_'"$KEY"\"`

	    if [ -n "$ROUTES" ]; then

		for route in $ROUTES; do

		    "$ip" route add "$route" dev "$BRIDGE"

		done

	    fi

        done

	;;

    stop)

	"$wpa_cli" -g "$CTRL" terminate 2>&1 | sed -e '/^OK$/d'

        for KEY in $ifkeys; do

	    ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`

	    INTERFACE=`addrtoif "$ADDRESS"`

	    "$ip" addr show scope global permanent dev "$INTERFACE" \

		| while read type addr rest; do

		case "$type" in

		    inet|inet6)

			"$ip" addr del "$addr" dev "$INTERFACE"

			;;

		esac

	    done

	    "$ip" link set dev "$INTERFACE" down

	done

	;;

    files)

	echo "$wpa_supplicant"

	echo "$wpa_cli"

	echo "$ip"

	;;

    modules)

	if [ "$IPADDRS" = dhcp ]; then

	    echo af_packet

	fi

	sed -n -e 's/#.*$//' -e 's/[ 	]*$//' \

	    -e 's/^MODULE_[^=]\+=//p' "$CONFIG"

	;;

esac