arif/xcat-core
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

-Explicitly bind stunnel to localhost to reduce security exposure

Browse Source 
git-svn-id: https://svn.code.sf.net/p/xcat/code/xcat-core/trunk@1046 8638fb3e-16cb-4fca-ae20-7b5d299a9bcd
This commit is contained in:
jbjohnso 2008-04-14 15:17:26 +00:00
parent d30ec1b729
commit 31e4ea7279
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
xCAT-nbroot/overlay/etc/init.d/S11stunnel
View File

@ -15,18 +15,17 @@ mkdir -p /etc/stunnel
echo 'client=yes' > /etc/stunnel/stunnel.conf
echo 'foreground=yes' >> /etc/stunnel/stunnel.conf
echo 'output=/dev/null' >> /etc/stunnel/stunnel.conf
#echo 'socket=a:SO_BINDTODEVICE=lo' >> /etc/stunnel/stunnel.conf
echo 'verify=0' >> /etc/stunnel/stunnel.conf
if [ ! -z "$XCATDEST" ]; then
echo '[xcatds]' >> /etc/stunnel/stunnel.conf
echo 'accept=301' >> /etc/stunnel/stunnel.conf
echo 'accept=127.0.0.1:301' >> /etc/stunnel/stunnel.conf
echo 'connect='$XCATDEST >> /etc/stunnel/stunnel.conf
fi
if [ -r /tmp/dhcpserver ]; then
let i=400;
for srv in `cat /tmp/dhcpserver`; do
echo "[xcatd$i]" >> /etc/stunnel/stunnel.conf
echo "accept=$i" >> /etc/stunnel/stunnel.conf
echo "accept=127.0.0.1:$i" >> /etc/stunnel/stunnel.conf
echo "connect="$srv":"$XCATPORT >> /etc/stunnel/stunnel.conf
let i=i+1
done