CSEC_PUBLIC/securityonion
1
0
Fork 0
mirror of https://github.com/Security-Onion-Solutions/securityonion.git synced 2025-12-06 17:22:49 +01:00
Code Issues Packages Projects Releases Wiki Activity

[fix] Only disable unused nics if the array is not empty

Browse Source
This commit is contained in:
William Wernert
2020-04-28 09:00:22 -04:00
parent b4f65955fe
commit af7accd1e9
1 changed files with 11 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
setup/so-functions
View File

@@ -514,16 +514,18 @@ disable_onion_user() {
} }
disable_misc_network_features() { disable_misc_network_features() {
for unused_nic in "${filtered_nics[@]}"; do if [ ${#filtered_nics[@]} -ne 0 ]; then
# Disable DHCPv4/v6 and autoconnect for unused_nic in "${filtered_nics[@]}"; do
nmcli con mod "$unused_nic" \ # Disable DHCPv4/v6 and autoconnect
ipv4.method disabled \ nmcli con mod "$unused_nic" \
ipv6.method ignore \ ipv4.method disabled \
connection.autoconnect "no" >> "$setup_log" 2>&1 ipv6.method ignore \
connection.autoconnect "no" >> "$setup_log" 2>&1
# Flush any existing IPs # Flush any existing IPs
ip addr flush "$unused_nic" >> "$setup_log" 2>&1 ip addr flush "$unused_nic" >> "$setup_log" 2>&1
done done
fi
# Disable IPv6 # Disable IPv6
{ {
echo "net.ipv6.conf.all.disable_ipv6 = 1" echo "net.ipv6.conf.all.disable_ipv6 = 1"