summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2020-06-19 16:38:40 +0200
committerChristian Poessinger <christian@poessinger.com>2020-06-19 16:38:40 +0200
commit647af6c5405e6a3ae89bf96cb20558c581ed83d7 (patch)
tree97e889083522ec38d9da9a4619d04b31580fe01e
parent96a4b6f46c99dd41a44505f929feda0422f4dca7 (diff)
downloadvyos-1x-647af6c5405e6a3ae89bf96cb20558c581ed83d7.tar.gz
vyos-1x-647af6c5405e6a3ae89bf96cb20558c581ed83d7.zip
console-server: T2490: server must listen only on localhost
-rw-r--r--data/templates/conserver/conserver.conf.tmpl4
-rw-r--r--src/etc/systemd/system/conserver-server.service.d/override.conf2
2 files changed, 3 insertions, 3 deletions
diff --git a/data/templates/conserver/conserver.conf.tmpl b/data/templates/conserver/conserver.conf.tmpl
index 5fffaf31e..4e7b5d8d7 100644
--- a/data/templates/conserver/conserver.conf.tmpl
+++ b/data/templates/conserver/conserver.conf.tmpl
@@ -32,6 +32,6 @@ console {{ key }} {
## list of clients we allow
##
access * {
- trusted 127.0.0.1;
- allowed 127.0.0.1;
+ trusted localhost;
+ allowed localhost;
}
diff --git a/src/etc/systemd/system/conserver-server.service.d/override.conf b/src/etc/systemd/system/conserver-server.service.d/override.conf
index 828d0bc4b..3c753f572 100644
--- a/src/etc/systemd/system/conserver-server.service.d/override.conf
+++ b/src/etc/systemd/system/conserver-server.service.d/override.conf
@@ -6,5 +6,5 @@ ConditionPathExists=/run/conserver/conserver.cf
[Service]
Type=simple
ExecStart=
-ExecStart=/usr/sbin/conserver -C /run/conserver/conserver.cf
+ExecStart=/usr/sbin/conserver -M localhost -C /run/conserver/conserver.cf
Restart=on-failure