From c014babde0e09248d235be93c74bae98d38cebf3 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Wed, 11 Mar 2015 20:38:57 -0500
Subject: [PATCH] Move libstrongswan-unity.so when Unity plugin is disabled so
 it can't modify the P2. Workaround for Ticket #4178

---
 etc/inc/vpn.inc | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/etc/inc/vpn.inc b/etc/inc/vpn.inc
index eda11be995..3bc4d70a88 100644
--- a/etc/inc/vpn.inc
+++ b/etc/inc/vpn.inc
@@ -340,6 +340,15 @@ function vpn_ipsec_configure($restart = false)
 	$unity_enabled = 'yes';
 	if (isset($config['ipsec']['unityplugin'])) {
 		$unity_enabled = 'no';
+		if (file_exists("/usr/local/lib/ipsec/plugins/libstrongswan-unity.so")) {
+			conf_mount_rw();
+			mwexec("mv /usr/local/lib/ipsec/plugins/libstrongswan-unity.so /usr/local/lib/ipsec/plugins/libstrongswan-unity.MOVED");
+			conf_mount_ro();
+		}
+	} else if (file_exists("/usr/local/lib/ipsec/plugins/libstrongswan-unity.MOVED")) {
+		conf_mount_rw();
+		mwexec("mv /usr/local/lib/ipsec/plugins/libstrongswan-unity.MOVED /usr/local/lib/ipsec/plugins/libstrongswan-unity.so");
+		conf_mount_ro();
 	}
 
 	if (isset($config['ipsec']['enableinterfacesuse'])) {