<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN">
<html><body>
<p>Hi there,</p>
<p>Been trying to use the resolve plugin from charon to update /etc/resolv.conf<br />with the DNS server which is accessable only when the VPN tunnel is setup.<br />It adds the line with the correct dns server once the VPN tunnel is setup, but the file /etc/resolv.conf gets incorrect file permissions.<br />Is this a bug ? Or is it possible to use some kind of umask within the resolve.conf configuration of charon ?</p>
<p>cat /etc/os-release <br />NAME=openSUSE<br />VERSION="13.2 (Harlequin)"<br />VERSION_ID="13.2"<br />PRETTY_NAME="openSUSE 13.2 (Harlequin) (x86_64)" </p>
<p>/usr/sbin # ./ipsec version<br />Linux strongSwan U5.1.3/K3.16.7-29-default</p>
<div>/etc/strongswan.d/charon # cat resolve.conf <br />resolve {<br /><br /> # File where to add DNS server entries.<br /> file = /etc/resolv.conf<br /><br /> # Whether to load the plugin. Can also be an integer to increase the<br /> # priority of this plugin.<br /> load = yes<br /><br /> resolvconf {<br /><br /> # Prefix used for interface names sent to resolvconf(8).<br /> # iface_prefix = lo.inet.ipsec.<br /><br /> }<br /><br />} </div>
<div>###</div>
<div>after ipsec restart:</div>
<div>ls -lat /etc | grep resolv.conf<br />-rw------- 1 root root 836 Apr 1 21:41 resolv.conf</div>
<div>File is modified with the correct information:</div>
<div>cat /etc/resolv.conf | head -1<br />nameserver 10.10.10.10 # by strongSwan, from vpn.somedomain.org</div>
<div>(dns server ip and fqdn of vpn server are anonymized)</div>
<div>Thanks,</div>
<div>Ronald</div>
</body></html>