/mandos/trunk

To get this branch, use:
bzr branch http://bzr.recompile.se/loggerhead/mandos/trunk
505.3.10 by Teddy Hogeborn
* network-hooks.d: New directory.
1
#!/bin/sh
2
#
3
# This is an example of a Mandos client network hook.  This hook
4
# brings up a bridge interface as specified in a separate
5
# configuration file.  To be used, this file and any needed
6
# configuration file(s) should be copied into the
7
# /etc/mandos/network-hooks.d directory.
8
# 
563 by Teddy Hogeborn
* network-hooks.d/bridge: Move "start" and "stop" commands to separate
9
# Copyright © 2012 Teddy Hogeborn
10
# Copyright © 2012 Björn Påhlsson
549 by teddy at recompile
* Makefile (install-server): Add intro(8mandos) man page.
11
# 
505.3.10 by Teddy Hogeborn
* network-hooks.d: New directory.
12
# Copying and distribution of this file, with or without modification,
13
# are permitted in any medium without royalty provided the copyright
14
# notice and this notice are preserved.  This file is offered as-is,
15
# without any warranty.
16
17
set -e
18
19
CONFIG="$MANDOSNETHOOKDIR/bridge.conf"
20
535.1.8 by teddy at recompile
* network-hooks.s/bridge: Don't use interface names directly; search
21
addrtoif(){
535.1.9 by teddy at recompile
* network-hooks.s/bridge: Don't use interface names directly; search
22
    grep -liFe "$1" /sys/class/net/*/address \
555 by Teddy Hogeborn
* network-hooks.d/bridge: Bug fixes: Ignore bridge interface when
23
	| sed -e 's,.*/\([^/]*\)/[^/]*,\1,' -e "/^${BRIDGE}\$/d"
535.1.8 by teddy at recompile
* network-hooks.s/bridge: Don't use interface names directly; search
24
}
25
26
# Read config file, which must set "BRIDGE", "PORT_ADDRESSES", and
27
# optionally "IPADDRS" and "ROUTES".
505.3.10 by Teddy Hogeborn
* network-hooks.d: New directory.
28
if [ -e "$CONFIG" ]; then
29
    . "$CONFIG"
30
fi
31
535.1.8 by teddy at recompile
* network-hooks.s/bridge: Don't use interface names directly; search
32
if [ -z "$BRIDGE" -o -z "$PORT_ADDRESSES" ]; then
505.3.10 by Teddy Hogeborn
* network-hooks.d: New directory.
33
    exit
34
fi
35
36
if [ -n "$DEVICE" -a "$DEVICE" != "$BRIDGE" ]; then
37
    exit
38
fi
39
555 by Teddy Hogeborn
* network-hooks.d/bridge: Bug fixes: Ignore bridge interface when
40
brctl="/sbin/brctl"
41
for b in "$brctl" /usr/sbin/brctl; do
505.3.21 by Teddy Hogeborn
* network-hooks.d/bridge: Bug fix - really find brctl.
42
    if [ -e "$b" ]; then
43
	brctl="$b"
505.3.20 by Teddy Hogeborn
* network-hooks.d/bridge: Look for both /sbin/brctl and /usr/sbin/brctl.
44
	break
45
    fi
46
done
47
563 by Teddy Hogeborn
* network-hooks.d/bridge: Move "start" and "stop" commands to separate
48
do_start(){
49
    "$brctl" addbr "$BRIDGE"
50
    for address in $PORT_ADDRESSES; do
51
	interface=`addrtoif "$address"`
52
	"$brctl" addif "$BRIDGE" "$interface"
53
	ip link set dev "$interface" up
54
    done
55
    ip link set dev "$BRIDGE" up
56
    sleep "${DELAY%%.*}"
57
    if [ -n "$IPADDRS" ]; then
58
        for ipaddr in $IPADDRS; do
59
	    ip addr add "$ipaddr" dev "$BRIDGE"
60
	done
61
    fi
62
    if [ -n "$ROUTES" ]; then
63
        for route in $ROUTES; do
64
	    ip route add "$route" dev "$BRIDGE"
65
	done
66
    fi
67
}
68
69
do_stop(){
70
    ip link set dev "$BRIDGE" down
71
    for address in $PORT_ADDRESSES; do
72
	interface=`addrtoif "$address"`
73
	ip link set dev "$interface" down
74
	"$brctl" delif "$BRIDGE" "$interface"
75
    done
76
    "$brctl" delbr "$BRIDGE"
77
}
78
79
case "${MODE:-$1}" in
80
    start|stop)
81
	do_"${MODE:-$1}"
505.3.10 by Teddy Hogeborn
* network-hooks.d: New directory.
82
	;;
83
    files)
84
	echo /bin/ip
505.3.20 by Teddy Hogeborn
* network-hooks.d/bridge: Look for both /sbin/brctl and /usr/sbin/brctl.
85
	echo "$brctl"
505.3.14 by teddy at bsnet
Hooks take new "modules" argument, and hook names can contain periods.
86
	;;
87
    modules)
88
	echo bridge
505.3.10 by Teddy Hogeborn
* network-hooks.d: New directory.
89
	;;
90
esac