summaryrefslogtreecommitdiffstats
path: root/etc/inc/vpn.inc
diff options
context:
space:
mode:
authorScott Ullrich <sullrich@pfsense.org>2005-08-14 21:22:35 +0000
committerScott Ullrich <sullrich@pfsense.org>2005-08-14 21:22:35 +0000
commit913b18e4d18c7deab0ffb7455d1c423d369cf39c (patch)
treef808898c24d3e97949e9386ec842756aa03586c3 /etc/inc/vpn.inc
parente52f293fd16390959c813593ec5b9af42f7e1f61 (diff)
downloadpfsense-913b18e4d18c7deab0ffb7455d1c423d369cf39c.zip
pfsense-913b18e4d18c7deab0ffb7455d1c423d369cf39c.tar.gz
Only run padlock functions if <developer> bit is set
Diffstat (limited to 'etc/inc/vpn.inc')
-rw-r--r--etc/inc/vpn.inc20
1 files changed, 11 insertions, 9 deletions
diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index 59b614e..764b779 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -87,15 +87,17 @@ function find_last_gif_device() {
function vpn_ipsec_configure($ipchg = false) {
global $config, $g;
- if($g['booting'] == true) {
- /* determine if we should load the via padlock module */
- $dmesg_boot = `cat /var/log/dmesg.boot | grep Features`;
- if(stristr($dmesg_boot, "ACE") == true) {
- echo "Enabling [VIA Padlock] ...";
- mwexec("/sbin/kldload padlock");
- mwexec("/sbin/sysctl net.inet.ipsec.crypto_support=1");
- mwexec("/usr/sbin/setkey -F;/usr/sbin/setkey -FP");
- echo " done.";
+ if(isset($config['system']['developer'])) {
+ if($g['booting'] == true) {
+ /* determine if we should load the via padlock module */
+ $dmesg_boot = `cat /var/log/dmesg.boot | grep Features`;
+ if(stristr($dmesg_boot, "ACE") == true) {
+ echo "Enabling [VIA Padlock] ...";
+ mwexec("/sbin/kldload padlock");
+ mwexec("/sbin/sysctl net.inet.ipsec.crypto_support=1");
+ mwexec("/usr/sbin/setkey -F;/usr/sbin/setkey -FP");
+ echo " done.";
+ }
}
}
OpenPOWER on IntegriCloud