wg-quick: allow enumeration of socket files
These OSes have an unpriv'd ifconfig, so this isn't an even larger info leak. Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
This commit is contained in:
		
							parent
							
								
									3d089e07e2
								
							
						
					
					
						commit
						86dd5587a9
					
				@ -107,7 +107,7 @@ get_real_interface() {
 | 
			
		||||
 | 
			
		||||
add_if() {
 | 
			
		||||
	export WG_TUN_NAME_FILE="/var/run/wireguard/$INTERFACE.name"
 | 
			
		||||
	mkdir -m 0700 -p "/var/run/wireguard/"
 | 
			
		||||
	mkdir -p "/var/run/wireguard/"
 | 
			
		||||
	cmd "${WG_QUICK_USERSPACE_IMPLEMENTATION:-wireguard-go}" utun
 | 
			
		||||
	get_real_interface
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
@ -98,7 +98,7 @@ get_real_interface() {
 | 
			
		||||
 | 
			
		||||
add_if() {
 | 
			
		||||
	export WG_TUN_NAME_FILE="/var/run/wireguard/$INTERFACE.name"
 | 
			
		||||
	mkdir -m 0700 -p "/var/run/wireguard/"
 | 
			
		||||
	mkdir -p "/var/run/wireguard/"
 | 
			
		||||
	cmd "${WG_QUICK_USERSPACE_IMPLEMENTATION:-wireguard-go}" tun
 | 
			
		||||
	get_real_interface
 | 
			
		||||
}
 | 
			
		||||
 | 
			
		||||
		Reference in New Issue
	
	Block a user