diff options
| author | Scott Ullrich <sullrich@pfsense.org> | 2005-08-14 21:22:35 +0000 |
|---|---|---|
| committer | Scott Ullrich <sullrich@pfsense.org> | 2005-08-14 21:22:35 +0000 |
| commit | 913b18e4d18c7deab0ffb7455d1c423d369cf39c (patch) | |
| tree | f808898c24d3e97949e9386ec842756aa03586c3 | |
| parent | e52f293fd16390959c813593ec5b9af42f7e1f61 (diff) | |
| download | pfsense-913b18e4d18c7deab0ffb7455d1c423d369cf39c.zip pfsense-913b18e4d18c7deab0ffb7455d1c423d369cf39c.tar.gz | |
Only run padlock functions if <developer> bit is set
| -rw-r--r-- | etc/inc/vpn.inc | 20 |
1 files changed, 11 insertions, 9 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc index 59b614e..764b779 100644 --- a/etc/inc/vpn.inc +++ b/etc/inc/vpn.inc @@ -87,15 +87,17 @@ function find_last_gif_device() { function vpn_ipsec_configure($ipchg = false) { global $config, $g; - if($g['booting'] == true) { - /* determine if we should load the via padlock module */ - $dmesg_boot = `cat /var/log/dmesg.boot | grep Features`; - if(stristr($dmesg_boot, "ACE") == true) { - echo "Enabling [VIA Padlock] ..."; - mwexec("/sbin/kldload padlock"); - mwexec("/sbin/sysctl net.inet.ipsec.crypto_support=1"); - mwexec("/usr/sbin/setkey -F;/usr/sbin/setkey -FP"); - echo " done."; + if(isset($config['system']['developer'])) { + if($g['booting'] == true) { + /* determine if we should load the via padlock module */ + $dmesg_boot = `cat /var/log/dmesg.boot | grep Features`; + if(stristr($dmesg_boot, "ACE") == true) { + echo "Enabling [VIA Padlock] ..."; + mwexec("/sbin/kldload padlock"); + mwexec("/sbin/sysctl net.inet.ipsec.crypto_support=1"); + mwexec("/usr/sbin/setkey -F;/usr/sbin/setkey -FP"); + echo " done."; + } } } |
