diff options
author | Arne Schwabe <arne@rfc2549.org> | 2013-05-30 23:02:17 +0200 |
---|---|---|
committer | Gert Doering <gert@greenie.muc.de> | 2013-05-31 09:59:26 +0200 |
commit | e55681a9d802bf1639115d325c1685e5962865d0 (patch) | |
tree | d92413f5295b964f7c2c281827e4c2b52e472181 /src/openvpn/options.c | |
parent | 9b6a5028111cd915b0342fbd2ecd0b9dfd4aa94a (diff) | |
download | openvpn-e55681a9d802bf1639115d325c1685e5962865d0.tar.gz openvpn-e55681a9d802bf1639115d325c1685e5962865d0.tar.xz openvpn-e55681a9d802bf1639115d325c1685e5962865d0.zip |
Move checking of script file access into set_user_script
At the moment script are only checked if P2MP_SERVER is defined. For
CLIENT_ONLY openvpn script were never checked.
Acked-by: Gert Doering <gert@greenie.muc.de>
Message-Id: <1369947737-26081-1-git-send-email-arne@rfc2549.org>
URL: http://article.gmane.org/gmane.network.openvpn.devel/7635
Signed-off-by: Gert Doering <gert@greenie.muc.de>
Diffstat (limited to 'src/openvpn/options.c')
-rw-r--r-- | src/openvpn/options.c | 33 |
1 files changed, 11 insertions, 22 deletions
diff --git a/src/openvpn/options.c b/src/openvpn/options.c index f70f06e..8975bbc 100644 --- a/src/openvpn/options.c +++ b/src/openvpn/options.c @@ -2745,28 +2745,6 @@ options_postprocess_filechecks (struct options *options) errs |= check_file_access (CHKACC_FILE, options->tmp_dir, R_OK|W_OK|X_OK, "Temporary directory (--tmp-dir)"); - /* ** Script hooks that accept an optionally quoted and/or escaped executable path, ** */ - /* ** optionally followed by arguments ** */ - errs |= check_cmd_access (options->auth_user_pass_verify_script, - "--auth-user-pass-verify script"); - errs |= check_cmd_access (options->client_connect_script, - "--client-connect script"); - errs |= check_cmd_access (options->client_disconnect_script, - "--client-disconnect script"); - errs |= check_cmd_access (options->tls_verify, - "--tls-verify script"); - errs |= check_cmd_access (options->up_script, - "--up script"); - errs |= check_cmd_access (options->down_script, - "--down script"); - errs |= check_cmd_access (options->ipchange, - "--ipchange script"); - errs |= check_cmd_access (options->route_script, - "--route-up script"); - errs |= check_cmd_access (options->route_predown_script, - "--route-pre-down script"); - errs |= check_cmd_access (options->learn_address_script, - "--learn-address script"); #endif /* P2MP_SERVER */ if (errs) @@ -4037,6 +4015,17 @@ set_user_script (struct options *options, } *script = new_script; options->user_script_used = true; + +#ifndef ENABLE_SMALL + { + char script_name[100]; + openvpn_snprintf (script_name, sizeof(script_name), + "--%s script", type); + + if (check_cmd_access (*script, script_name)) + msg (M_USAGE, "Please correct this error."); + } +#endif } |