Bug 785180

Summary: openswan uses ifconfig
Product: [Fedora] Fedora Reporter: Jiri Popelka <jpopelka>
Component: openswanAssignee: Avesh Agarwal <avagarwa>
Status: CLOSED CURRENTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: avagarwa, pwouters
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-02-08 18:43:51 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 687920    
Attachments:
Description Flags
patch
none
patch none

Description Jiri Popelka 2012-01-27 14:48:23 UTC
Created attachment 557873 [details]
patch

Hi,

even that openswan package doesn't explicitly require net-tools, it uses ifconfig in /usr/libexec/ipsec/verify.
It should be replaced with 'ip' command.
See attached patch.

Comment 1 Jiri Popelka 2012-05-10 11:29:23 UTC
Created attachment 583512 [details]
patch

Actually also /usr/libexec/ipsec/_startklips uses 'netstat-r' which should be replaced with 'ip route'.

Comment 2 Paul Wouters 2012-08-21 03:11:01 UTC
thanks for the report. ipsec verify is slated to be fixed. _startklips has already been fixed to not use netstat.

Comment 3 Paul Wouters 2013-02-08 18:43:51 UTC
These were fixed by me in the upstream openswan version 2.6.38 which is our current release in fedora