[19.07] luci-app-fwknopd: add support for ENABLE_CMD_EXEC
authorPtilopsis Leucotis <PtilopsisLeucotis@yandex.com>
Wed, 14 Apr 2021 07:06:50 +0000 (10:06 +0300)
committerHannu Nyman <hannu.nyman@iki.fi>
Wed, 14 Apr 2021 07:17:39 +0000 (10:17 +0300)
Add support for execution commands on the fwknopd server.

Signed-off-by: Ptilopsis Leucotis <PtilopsisLeucotis@yandex.com>
applications/luci-app-fwknopd/luasrc/model/cbi/fwknopd.lua

index 43583744409b2019279fbb43dc53b7b8ddb837a9..27ef2430799062c6aca0316fd1556edf1683b1e1 100644 (file)
@@ -40,6 +40,9 @@ s:option(Value, "REQUIRE_SOURCE_ADDRESS", "REQUIRE_SOURCE_ADDRESS", translate("F
                                        This makes it impossible to use the -s command line argument on the fwknop client command line, so either -R \
                                        has to be used to automatically resolve the external address (if the client behind a NAT) or the client must \
                                        know the external IP and set it via the -a argument."))
+s:option(Value, "ENABLE_CMD_EXEC", "ENABLE_CMD_EXEC", translate("This instructs fwknopd to accept complete commands that are contained within an authorization packet. \
+                                                       Any such command will be executed on the fwknopd server as the user specified by the “CMD_EXEC_USER” or as the user \
+                                                       that started fwknopd if that is not set."))
 
 s = m:section(TypedSection, "config", translate("fwknopd.conf config options")) 
 s.anonymous=true