3
# This is an example of a Mandos client network hook. This hook
4
# brings up a wireless interface as specified in a separate
5
# configuration file. To be used, this file and any needed
6
# configuration file(s) should be copied into the
7
# /etc/mandos/network-hooks.d directory.
9
# Copyright © 2012 Teddy Hogeborn
10
# Copyright © 2012 Björn Påhlsson
12
# Copying and distribution of this file, with or without modification,
13
# are permitted in any medium without royalty provided the copyright
14
# notice and this notice are preserved. This file is offered as-is,
15
# without any warranty.
20
CTRL="$RUNDIR/wpa_supplicant-global"
21
CTRLDIR="$RUNDIR/wpa_supplicant"
22
PIDFILE="$RUNDIR/wpa_supplicant-mandos.pid"
24
CONFIG="$MANDOSNETHOOKDIR/wireless.conf"
27
grep -liFe "$1" /sys/class/net/*/address \
28
| sed -e 's,.*/\([^/]*\)/[^/]*,\1,'
32
if [ -e "$CONFIG" ]; then
38
ifkeys=`env | sed -n -e 's/^ADDRESS_\([^=]*\)=.*/\1/p' "$CONFIG" \
41
# Exit if DEVICE is set and is not any of the wireless interfaces
42
if [ -n "$DEVICE" ]; then
44
for KEY in $ifkeys; do
45
ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
46
INTERFACE=`addrtoif "$ADDRESS"`
47
if [ "$INTERFACE" = "$DEVICE" ]; then
55
wpa_supplicant=/sbin/wpa_supplicant
59
# Used by the wpa_interface_* functions in the wireless.conf file
62
ssid|psk) arg="\"$2\"" ;;
65
"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" set_network "$NETWORK" \
66
"$1" "$arg" 2>&1 | sed -e '/^OK$/d'
69
if [ $VERBOSITY -gt 0 ]; then
70
WPAS_OPTIONS="-d $WPAS_OPTIONS"
72
if [ -n "$PIDFILE" ]; then
73
WPAS_OPTIONS="-P$PIDFILE $WPAS_OPTIONS"
77
mkdir -m u=rwx,go= -p "$CTRLDIR"
78
"$wpa_supplicant" -B -g "$CTRL" -p "$CTRLDIR" $WPAS_OPTIONS
79
for KEY in $ifkeys; do
80
ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
81
INTERFACE=`addrtoif "$ADDRESS"`
82
DRIVER=`eval 'echo "$WPA_DRIVER_'"$KEY"\"`
83
IFDELAY=`eval 'echo "$DELAY_'"$KEY"\"`
84
"$wpa_cli" -g "$CTRL" interface_add "$INTERFACE" "" \
85
"${DRIVER:-wext}" "$CTRLDIR" > /dev/null \
87
NETWORK=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" add_network`
88
eval wpa_interface_"$KEY"
89
"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" enable_network \
90
"$NETWORK" | sed -e '/^OK$/d'
91
sleep "${IFDELAY:-$DELAY}" &
94
kill -0 $sleep 2>/dev/null || break
95
STATE=`"$wpa_cli" -p "$CTRLDIR" -i "$INTERFACE" status \
96
| sed -n -e 's/^wpa_state=//p'`
97
if [ "$STATE" = COMPLETED ]; then
99
kill -0 $sleep 2>/dev/null || break 2
100
UP=`cat /sys/class/net/"$INTERFACE"/operstate`
101
if [ "$UP" = up ]; then
102
kill $sleep 2>/dev/null
111
IPADDRS=`eval 'echo "$IPADDRS_'"$KEY"\"`
112
if [ -n "$IPADDRS" ]; then
113
if [ "$IPADDRS" = dhcp ]; then
114
ipconfig -c dhcp -d "$INTERFACE" || :
115
#dhclient "$INTERFACE"
117
for ipaddr in $IPADDRS; do
118
"$ip" addr add "$ipaddr" dev "$INTERFACE"
122
ROUTES=`eval 'echo "$ROUTES_'"$KEY"\"`
123
if [ -n "$ROUTES" ]; then
124
for route in $ROUTES; do
125
"$ip" route add "$route" dev "$BRIDGE"
132
"$wpa_cli" -g "$CTRL" terminate 2>&1 | sed -e '/^OK$/d'
133
for KEY in $ifkeys; do
134
ADDRESS=`eval 'echo "$ADDRESS_'"$KEY"\"`
135
INTERFACE=`addrtoif "$ADDRESS"`
136
"$ip" addr show scope global permanent dev "$INTERFACE" \
137
| while read type addr rest; do
140
"$ip" addr del "$addr" dev "$INTERFACE"
144
"$ip" link set dev "$INTERFACE" down
148
case "${MODE:-$1}" in
153
echo "$wpa_supplicant"
158
if [ "$IPADDRS" = dhcp ]; then
161
sed -n -e 's/#.*$//' -e 's/[ ]*$//' \
162
-e 's/^MODULE_[^=]\+=//p' "$CONFIG"
added
removed
network-hooks.d/wireless
