[PATCH] Make it easy to decline resolv.conf updates

Daniel Kahn Gillmor dkg at fifthhorseman.net
Mon Feb 26 10:57:11 PST 2018


On Mon 2018-02-26 16:28:19 +0100, David Woodhouse wrote:
> On Wed, 2018-02-21 at 16:49 -0800, Daniel Kahn Gillmor wrote:
>> There are situations where the user wants to use the routing
>> information offered by the VPN, but does not want to use the DNS
>> recommendations.
>> 
>> In this case, it'd be nice to be able to tell vpnc this preference.
>> 
>> With this change, a vpnc configfile line should do the right thing:
>> 
>>       Script /usr/share/vpnc-scripts/vpnc-script --no-update-resolv.conf
>
> Does the same approach with work openconnect? Or could we do it with an
> exported environment variable instead?

i don't know whether the same approach works with openconnect, sorry.

fwiw, i'd be happy with either approach.  With an exported env var, i
assume the line would just be something like:

    Script /usr/bin/env NO_UPDATE_RESOLVCONF=true /usr/share/vpnc-scripts/vpnc-script

or

    Script /usr/bin/env UPDATE_RESOLVCONF=no /usr/share/vpnc-scripts/vpnc-script

sound right?

      --dkg
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 227 bytes
Desc: not available
URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20180226/38b660bd/attachment.sig>


More information about the openconnect-devel mailing list