mirror of
git://slackware.nl/current.git
synced 2024-12-27 09:59:16 +01:00
47e3f5d9c3
a/etc-15.1-x86_64-9.txz: Rebuilt.
Added proftpd user (97) and proftpd group (97).
Added nm-openvpn user (320) and nm-openvpn group (320).
Added openvpn user (443) and openvpn group (443).
Added overflowuid user (65534) and overflowgid group (65534).
Thanks to opty for encouraging us to think about nobody.
d/meson-1.4.0-x86_64-1.txz: Upgraded.
d/python-setuptools-69.2.0-x86_64-1.txz: Upgraded.
l/expat-2.6.2-x86_64-1.txz: Upgraded.
Prevent billion laughs attacks with isolated use of external parsers.
For more information, see:
1d50b80cf3
https://www.cve.org/CVERecord?id=CVE-2024-28757
(* Security fix *)
l/pipewire-1.0.4-x86_64-1.txz: Upgraded.
l/python-zipp-3.18.0-x86_64-1.txz: Upgraded.
n/openvpn-2.6.9-x86_64-2.txz: Rebuilt.
Run as openvpn:openvpn. Thanks to rkelsen.
n/proftpd-1.3.8b-x86_64-2.txz: Rebuilt.
Run as proftpd:proftpd.
x/libva-2.21.0-x86_64-1.txz: Upgraded.
x/libva-utils-2.21.0-x86_64-1.txz: Upgraded.
xap/NetworkManager-openvpn-1.10.2-x86_64-2.txz: Rebuilt.
Run as nm-openvpn:nm-openvpn. Thanks to Markus Wiesner.
111 lines
3.4 KiB
Bash
111 lines
3.4 KiB
Bash
#!/bin/sh
|
|
#
|
|
# /etc/rc.d/rc.openvpn
|
|
#
|
|
# Start/stop/restart the openvpn daemon.
|
|
#
|
|
# By default, this script will start/stop/restart a daemon for every *.conf
|
|
# file found in /etc/openvpn.
|
|
#
|
|
# To work with a single connection, add the name of the config file:
|
|
# /etc/rc.d/rc.openvpn start configfile.conf
|
|
#
|
|
# You may also use a config file not found in /etc/openvpn by providing a
|
|
# complete path:
|
|
# /etc/rc.d/rc.openvpn start /path/to/some/other/configfile.conf
|
|
#
|
|
# The name of a config file provided with a complete path should not match
|
|
# the name of any config file present in the /etc/openvpn directory.
|
|
|
|
ovpn_start() {
|
|
if [ -x /usr/sbin/openvpn ]; then
|
|
if [ -z "$1" ]; then # start OpenVPN for all config files:
|
|
if /bin/ls /etc/openvpn/*.conf 1> /dev/null 2> /dev/null ; then
|
|
for config in /etc/openvpn/*.conf ; do
|
|
echo "Starting OpenVPN: /usr/sbin/openvpn --daemon --writepid /run/openvpn/$(basename $config).pid --user openvpn --group openvpn --config $config"
|
|
/usr/sbin/openvpn --daemon --writepid /run/openvpn/$(basename $config).pid --user openvpn --group openvpn --config $config
|
|
done
|
|
else
|
|
echo "Unable to start OpenVPN - no .conf files found in /etc/openvpn/."
|
|
fi
|
|
else # start OpenVPN for one config file:
|
|
if [ -r "$1" ]; then
|
|
echo "Starting OpenVPN: /usr/sbin/openvpn --daemon --writepid /run/openvpn/$(basename $1).pid --user openvpn --group openvpn --config $1"
|
|
/usr/sbin/openvpn --daemon --writepid /run/openvpn/$(basename $1).pid --user openvpn --group openvpn --config $1
|
|
else # config file is missing:
|
|
echo "Error starting OpenVPN: config file $1 is missing."
|
|
fi
|
|
fi
|
|
fi
|
|
}
|
|
|
|
ovpn_stop() {
|
|
# Note: OpenVPN has a bad habit of leaving stale pid files around when exiting.
|
|
# Maybe it would be better to just use killall unless called for one config?
|
|
if [ -z "$1" ]; then # stop OpenVPN for all pid files:
|
|
if /bin/ls /run/openvpn/*.pid 1> /dev/null 2> /dev/null ; then
|
|
for pid in /run/openvpn/*.pid ; do
|
|
echo "Stopping OpenVPN for pid file $pid..."
|
|
kill $(cat $pid)
|
|
rm -f $pid
|
|
done
|
|
else
|
|
echo "Warning: no pid files found in /run/openvpn/. Using killall to stop any OpenVPN processes."
|
|
killall openvpn
|
|
fi
|
|
else # stop OpenVPN for one config file:
|
|
if [ -r /run/openvpn/$(basename ${1}).pid ]; then
|
|
echo "Stopping OpenVPN for config file ${1}..."
|
|
kill $(cat /run/openvpn/$(basename ${1}).pid)
|
|
rm -f /run/openvpn/$(basename ${1}).pid
|
|
else
|
|
echo "Error stopping OpenVPN: no such pid file /run/openvpn/$(basename ${1}).pid"
|
|
fi
|
|
fi
|
|
}
|
|
|
|
ovpn_restart() {
|
|
if [ ! -z "$1" ]; then # restart for all config files:
|
|
ovpn_stop
|
|
sleep 2
|
|
ovpn_start
|
|
else # restart for one config file only:
|
|
ovpn_stop $1
|
|
sleep 2
|
|
ovpn_start $1
|
|
fi
|
|
}
|
|
|
|
ovpn_status() {
|
|
if /bin/ls /run/openvpn/*.pid 1> /dev/null 2> /dev/null ; then
|
|
echo "Currently running OpenVPN processes according to .pid files in /run/openvpn:"
|
|
for pid in /run/openvpn/*.pid ; do
|
|
echo " $(basename $pid) ($(cat $pid))"
|
|
done
|
|
else
|
|
echo "No .pid files found in /run/openvpn."
|
|
fi
|
|
}
|
|
|
|
# Create PID directory if it doesn't exist:
|
|
if [ ! -d /run/openvpn ]; then
|
|
mkdir -p /run/openvpn
|
|
fi
|
|
|
|
case "$1" in
|
|
'start')
|
|
ovpn_start $2
|
|
;;
|
|
'stop')
|
|
ovpn_stop $2
|
|
;;
|
|
'restart')
|
|
ovpn_restart $2
|
|
;;
|
|
'status')
|
|
ovpn_status
|
|
;;
|
|
*)
|
|
echo "Usage: $0 {start|stop|restart}"
|
|
esac
|
|
|