diff options
| -rw-r--r-- | debian/control | 1 | ||||
| -rw-r--r-- | debian/patches/02_disable-bypass-lan.patch | 13 | ||||
| -rw-r--r-- | debian/patches/series | 1 | ||||
| -rwxr-xr-x | debian/rules | 1 | ||||
| -rw-r--r-- | debian/strongswan-libcharon.install | 4 |
5 files changed, 20 insertions, 0 deletions
diff --git a/debian/control b/debian/control index e5e09b467..1139f3ead 100644 --- a/debian/control +++ b/debian/control @@ -225,6 +225,7 @@ Description: strongSwan charon library plugins: - socket-default - counters + - bypass-lan (disabled by default) Package: strongswan-charon Architecture: any diff --git a/debian/patches/02_disable-bypass-lan.patch b/debian/patches/02_disable-bypass-lan.patch new file mode 100644 index 000000000..19333714e --- /dev/null +++ b/debian/patches/02_disable-bypass-lan.patch @@ -0,0 +1,13 @@ +diff --git a/conf/plugins/bypass-lan.conf b/conf/plugins/bypass-lan.conf +index ad496db67..e470ce68e 100644 +--- a/conf/plugins/bypass-lan.conf ++++ b/conf/plugins/bypass-lan.conf +@@ -11,7 +11,7 @@ bypass-lan { + + # Whether to load the plugin. Can also be an integer to increase the + # priority of this plugin. +- load = yes ++ load = no + + } + diff --git a/debian/patches/series b/debian/patches/series index 6d7cc1dfa..fde45f535 100644 --- a/debian/patches/series +++ b/debian/patches/series @@ -1,3 +1,4 @@ 01_fix-manpages.patch +02_disable-bypass-lan.patch 03_systemd-service.patch 04_disable-libtls-tests.patch diff --git a/debian/rules b/debian/rules index 6d160a9a7..8f5f922d5 100755 --- a/debian/rules +++ b/debian/rules @@ -6,6 +6,7 @@ export DEB_BUILD_MAINT_OPTIONS=hardening=+all CONFIGUREARGS := --libdir=/usr/lib --libexecdir=/usr/lib \ --enable-addrblock \ --enable-agent \ + --enable-bypass-lan \ --enable-ccm \ --enable-certexpire \ --enable-cmd \ diff --git a/debian/strongswan-libcharon.install b/debian/strongswan-libcharon.install index 6cc9e73ae..06b4859b5 100644 --- a/debian/strongswan-libcharon.install +++ b/debian/strongswan-libcharon.install @@ -13,3 +13,7 @@ usr/lib/ipsec/plugins/libstrongswan-updown.so usr/share/strongswan/templates/config/plugins/updown.conf etc/strongswan.d/charon/updown.conf usr/lib/ipsec/_updown +# bypass-lan +usr/lib/ipsec/plugins/libstrongswan-bypass-lan.so +usr/share/strongswan/templates/config/plugins/bypass-lan.conf +etc/strongswan.d/charon/bypass-lan.conf |