wg-quick: allow enumeration of socket files
These OSes have an unpriv'd ifconfig, so this isn't an even larger info leak. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
This commit is contained in:
parent
3d089e07e2
commit
86dd5587a9
|
@ -107,7 +107,7 @@ get_real_interface() {
|
||||||
|
|
||||||
add_if() {
|
add_if() {
|
||||||
export WG_TUN_NAME_FILE="/var/run/wireguard/$INTERFACE.name"
|
export WG_TUN_NAME_FILE="/var/run/wireguard/$INTERFACE.name"
|
||||||
mkdir -m 0700 -p "/var/run/wireguard/"
|
mkdir -p "/var/run/wireguard/"
|
||||||
cmd "${WG_QUICK_USERSPACE_IMPLEMENTATION:-wireguard-go}" utun
|
cmd "${WG_QUICK_USERSPACE_IMPLEMENTATION:-wireguard-go}" utun
|
||||||
get_real_interface
|
get_real_interface
|
||||||
}
|
}
|
||||||
|
|
|
@ -98,7 +98,7 @@ get_real_interface() {
|
||||||
|
|
||||||
add_if() {
|
add_if() {
|
||||||
export WG_TUN_NAME_FILE="/var/run/wireguard/$INTERFACE.name"
|
export WG_TUN_NAME_FILE="/var/run/wireguard/$INTERFACE.name"
|
||||||
mkdir -m 0700 -p "/var/run/wireguard/"
|
mkdir -p "/var/run/wireguard/"
|
||||||
cmd "${WG_QUICK_USERSPACE_IMPLEMENTATION:-wireguard-go}" tun
|
cmd "${WG_QUICK_USERSPACE_IMPLEMENTATION:-wireguard-go}" tun
|
||||||
get_real_interface
|
get_real_interface
|
||||||
}
|
}
|
||||||
|
|
Reference in New Issue