BastilleBSD/bastille
2
0
Fork 0
Code Pull Requests Actions Packages Releases Activity

Merge pull request #296 from chriswells0/require-interface

Browse Source 
Verify interface exists when starting jail.
This commit is contained in:
Christer Edwards
2020-12-31 15:00:46 -07:00
committed by GitHub
parent 1120a0eebd a56c37983c
commit 4136f8fff4
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
usr/local/share/bastille/start.sh
View File

@@ -67,11 +67,21 @@ for _jail in ${JAILS}; do
## test if not running ## test if not running
elif [ ! "$(jls name | awk "/^${_jail}$/")" ]; then elif [ ! "$(jls name | awk "/^${_jail}$/")" ]; then
# Verify that the configured interface exists. -- cwells
if [ "$(bastille config $_jail get vnet)" != 'enabled' ]; then
_interface=$(bastille config $_jail get interface)
if ! ifconfig | grep "^${_interface}:" >/dev/null; then
error_notify "Error: ${_interface} interface does not exist."
continue
fi
fi
## warn if matching configured (but not online) ip4.addr, ignore if there's no ip4.addr entry ## warn if matching configured (but not online) ip4.addr, ignore if there's no ip4.addr entry
ip=$(grep 'ip4.addr' "${bastille_jailsdir}/${_jail}/jail.conf" | awk '{print $3}' | sed 's/\;//g') ip=$(grep 'ip4.addr' "${bastille_jailsdir}/${_jail}/jail.conf" | awk '{print $3}' | sed 's/\;//g')
if [ -n "${ip}" ]; then if [ -n "${ip}" ]; then
if ifconfig | grep -w "${ip}" >/dev/null; then if ifconfig | grep -w "${ip}" >/dev/null; then
error_exit "Error: IP address (${ip}) already in use." error_notify "Error: IP address (${ip}) already in use."
continue
fi fi
fi fi