T852: globally disable StrongSWAN FARP plugin

This commit is contained in:
Christian Poessinger 2018-10-12 20:17:29 +02:00
parent f7d576c263
commit 5335d2c8b5

View File

@ -8,22 +8,31 @@
import re
# Disable the cisco_unity option in charon.conf
# Disable the 'cisco_unity' option in charon.conf
with open('/etc/strongswan.d/charon.conf', 'r') as f:
charon_conf = f.read()
charon_conf = re.sub(r'# (cisco_unity = no)', r"\1", charon_conf)
with open('/etc/strongswan.d/charon.conf', 'w') as f:
f.write(charon_conf)
# Prevent the unity plugin from loading
# Prevent the 'cisco_unity' plugin from loading
with open('/etc/strongswan.d/charon/unity.conf', 'r') as f:
unity_conf = f.read()
unity_conf = re.sub(r'load = yes', r'load = no', unity_conf)
with open('/etc/strongswan.d/charon/unity.conf', 'w') as f:
f.write(unity_conf)
# Prevent the 'farp' plugin from loading
with open('/etc/strongswan.d/charon/farp.conf', 'r') as f:
farp_conf = f.read()
farp_conf = re.sub(r'load = yes', r'load = no', farp_conf)
with open('/etc/strongswan.d/charon/farp.conf', 'w') as f:
f.write(farp_conf)