mirrors/pfsense
2
0
Fork 0
mirror of https://github.com/pfsense/pfsense.git synced 2025-10-26 11:38:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add warning for OpenVPN client, server, and override privileges.

Browse Source 
Since these can use OpenVPN advanced directives to call external
scripts, they can be used to run commands that the user may not
otherwise have access to run.

Issue #9510

(cherry picked from commit f75b0eb8e7)
This commit is contained in:
jim-p 2019-05-09 16:22:21 -04:00
parent 48ab49abab
commit a8a07cfbb4
4 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
src/etc/inc/priv.defs.inc
View File

@ -1281,18 +1281,21 @@ $priv_list['page-vpn-vpnl2tp-users-edit']['match'][] = "vpn_l2tp_users_edit.php*
$priv_list['page-openvpn-client'] = array();
$priv_list['page-openvpn-client']['name'] = gettext("WebCfg - OpenVPN: Clients");
$priv_list['page-openvpn-client']['descr'] = gettext("Allow access to the 'OpenVPN: Clients' page.");
$priv_list['page-openvpn-client']['warn'] = "standard-warning-root";
$priv_list['page-openvpn-client']['match'] = array();
$priv_list['page-openvpn-client']['match'][] = "vpn_openvpn_client.php*";
$priv_list['page-openvpn-csc'] = array();
$priv_list['page-openvpn-csc']['name'] = gettext("WebCfg - OpenVPN: Client Specific Override");
$priv_list['page-openvpn-csc']['descr'] = gettext("Allow access to the 'OpenVPN: Client Specific Override' page.");
$priv_list['page-openvpn-csc']['warn'] = "standard-warning-root";
$priv_list['page-openvpn-csc']['match'] = array();
$priv_list['page-openvpn-csc']['match'][] = "vpn_openvpn_csc.php*";
$priv_list['page-openvpn-server'] = array();
$priv_list['page-openvpn-server']['name'] = gettext("WebCfg - OpenVPN: Servers");
$priv_list['page-openvpn-server']['descr'] = gettext("Allow access to the 'OpenVPN: Servers' page.");
$priv_list['page-openvpn-server']['warn'] = "standard-warning-root";
$priv_list['page-openvpn-server']['match'] = array();
$priv_list['page-openvpn-server']['match'][] = "vpn_openvpn_server.php*";

1
src/usr/local/www/vpn_openvpn_client.php
View File

@ -24,6 +24,7 @@
##|*IDENT=page-openvpn-client
##|*NAME=OpenVPN: Clients
##|*DESCR=Allow access to the 'OpenVPN: Clients' page.
##|*WARN=standard-warning-root
##|*MATCH=vpn_openvpn_client.php*
##|-PRIV

1
src/usr/local/www/vpn_openvpn_csc.php
View File

@ -24,6 +24,7 @@
##|*IDENT=page-openvpn-csc
##|*NAME=OpenVPN: Client Specific Override
##|*DESCR=Allow access to the 'OpenVPN: Client Specific Override' page.
##|*WARN=standard-warning-root
##|*MATCH=vpn_openvpn_csc.php*
##|-PRIV

1
src/usr/local/www/vpn_openvpn_server.php
View File

@ -24,6 +24,7 @@
##|*IDENT=page-openvpn-server
##|*NAME=OpenVPN: Servers
##|*DESCR=Allow access to the 'OpenVPN: Servers' page.
##|*WARN=standard-warning-root
##|*MATCH=vpn_openvpn_server.php*
##|-PRIV