From: selva.nair@...277... Date: Fri, 13 Jul 2018 10:16:35 -0400 Message-Id: <1531491395-29049-1-git-send-email-selva.nair@...277...> In-Reply-To: <1530633509-4959-1-git-send-email-selva.nair@...277...> References: <1530633509-4959-1-git-send-email-selva.nair@...277...> Subject: [Openvpn-devel] [PATCH v3] Make up/down script errors not FATAL List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: 8bit To: openvpn-devel@lists.sourceforge.net From: Selva Nair The error is treated as a warning only if its triggered due to script_security < SSEC_SCRIPTS. This helps user interfaces enforce a safer script-security setting without causing a FATAL error. Signed-off-by: Selva Nair --- v3 changes: - script_security --> script_security() following commit bf97c00f7dba441b504881f38e40afcbb610a39f v2 changes: - Have script errors continue to trigger a FATAL error. - Update the commit message to match this change. src/openvpn/init.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/openvpn/init.c b/src/openvpn/init.c index d28d1fd..4969565 100644 --- a/src/openvpn/init.c +++ b/src/openvpn/init.c @@ -169,13 +169,14 @@ run_up_down(const char *command, if (command) { struct argv argv = argv_new(); + int flags = (script_security() >= SSEC_SCRIPTS)? S_FATAL : 0; ASSERT(arg); setenv_str(es, "script_type", script_type); argv_parse_cmd(&argv, command); argv_printf_cat(&argv, "%s %d %d %s %s %s", arg, tun_mtu, link_mtu, ifconfig_local, ifconfig_remote, context); argv_msg(M_INFO, &argv); - openvpn_run_script(&argv, es, S_FATAL, "--up/--down"); + openvpn_run_script(&argv, es, flags, "--up/--down"); argv_reset(&argv); } -- 2.1.4