From f54d9f50839fae422ca5b9befb3974c9fb40c542aa27a157068119f55acaaca5 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Tue, 1 Sep 2020 22:39:10 +0000 Subject: [PATCH] Accepting request 831323 from home:monosoul:branches:network:vpn Disable bypass-lan strongswan plugin by default, so update to the new version would not change existing strongswan behavior OBS-URL: https://build.opensuse.org/request/show/831323 OBS-URL: https://build.opensuse.org/package/show/network:vpn/strongswan?expand=0&rev=125 --- strongswan.spec | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/strongswan.spec b/strongswan.spec index a227260..c7ad454 100644 --- a/strongswan.spec +++ b/strongswan.spec @@ -446,7 +446,9 @@ echo 'd %{_rundir}/%{name} 0770 root root' > %{buildroot}%{_tmpfilesdir}/%{name} # install -c -m750 _fipscheck %{buildroot}/%{_libexecdir}/ipsec/ install -c -m644 %{_sourcedir}/fips-enforce.conf \ - %{buildroot}/%{strongswan_configs}/charon/zzz_fips-enforce.conf + %{buildroot}/%{strongswan_configs}/charon/zzz_fips-enforce.conf +# disable bypass-lan plugin by default +sed -i 's/\(load[ ]*=[ ]*\)yes/\1no/g' %{buildroot}/%{strongswan_configs}/charon/bypass-lan.conf # create fips hmac hashes _after_ install post run %{expand:%%global __os_install_post {%__os_install_post for f in %{buildroot}/%{strongswan_libdir}/lib*.so.*.*.* \