3
# This is an example of a Mandos client network hook. This hook
4
# brings up a bridge interface as specified in a separate
5
# configuration file. To be used, this file and any needed
6
# configuration file(s) should be copied into the
7
# /etc/mandos/network-hooks.d directory.
9
# Copyright © 2011 Teddy Hogeborn
10
# Copyright © 2011 Björn Påhlsson
12
# Copying and distribution of this file, with or without modification,
13
# are permitted in any medium without royalty provided the copyright
14
# notice and this notice are preserved. This file is offered as-is,
15
# without any warranty.
19
CONFIG="$MANDOSNETHOOKDIR/bridge.conf"
22
grep -liFe "$1" /sys/class/net/*/address \
23
| sed -e 's,.*/\([^/]*\)/[^/]*,\1,'
26
# Read config file, which must set "BRIDGE", "PORT_ADDRESSES", and
27
# optionally "IPADDRS" and "ROUTES".
28
if [ -e "$CONFIG" ]; then
32
if [ -z "$BRIDGE" -o -z "$PORT_ADDRESSES" ]; then
36
if [ -n "$DEVICE" -a "$DEVICE" != "$BRIDGE" ]; then
40
for b in /sbin/brctl /usr/sbin/brctl; do
49
"$brctl" addbr "$BRIDGE"
50
for address in $PORT_ADDRESSES; do
51
interface=`addrtoif "$address"`
52
"$brctl" addif "$BRIDGE" "$interface"
53
ip link set dev "$interface" up
55
ip link set dev "$BRIDGE" up
57
if [ -n "$IPADDRS" ]; then
58
for ipaddr in $IPADDRS; do
59
ip addr add "$ipaddr" dev "$BRIDGE"
62
if [ -n "$ROUTES" ]; then
63
for route in $ROUTES; do
64
ip route add "$route" dev "$BRIDGE"
69
ip link set dev "$BRIDGE" down
70
for address in $PORT_ADDRESSES; do
71
interface=`addrtoif "$address"`
72
ip link set dev "$interface" down
73
"$brctl" delif "$BRIDGE" "$interface"
75
"$brctl" delbr "$BRIDGE"