local passauth
config_get_bool passauth "${section}" PasswordAuth 1
[ "${passauth}" -eq 0 ] && nopasswd=1
- # B) listen port
+ # B) listen interface and port
local port
+ local interface
+ local address
config_get port "${section}" Port
+ config_get interface "${section}" Interface
+ config_get address "${interface}" ipaddr
+ port="${address:+${address}:}${port}"
# C) banner file
local bannerfile
- config_get bannerfile ${section} BannerFile
- [ -f $bannerfile ] || bannerfile=''
+ config_get bannerfile "${section}" BannerFile
+ [ -f "$bannerfile" ] || bannerfile=''
# D) gatewayports
local gatewayports
config_get_bool gatewayports "${section}" GatewayPorts 0
[ "${gatewayports}" -eq 1 ] || gatewayports=''
+ # E) root password authentication
+ local norootpasswd
+ local rootpassauth
+ config_get_bool rootpassauth "${section}" RootPasswordAuth 1
+ [ "${rootpassauth}" -eq 0 ] && norootpasswd=1
+ local rootloginallowed
+ local norootlogin
+ config_get_bool rootloginallowed "${section}" RootLogin 1
+ [ "${rootloginallowed}" -eq 0 ] && norootlogin=1
# concatenate parameters
local args
- args="${nopasswd:+-s }${port:+-p ${port} }${bannerfile:+-b $bannerfile }${gatewayports:+-a }-P /var/run/${NAME}.${PIDCOUNT}.pid"
+ args="${nopasswd:+-s }${norootpasswd:+-g }${norootlogin:+-w }${port:+-p ${port} }${bannerfile:+-b $bannerfile }${gatewayports:+-a }-P /var/run/${NAME}.${PIDCOUNT}.pid"
# execute program and return its exit code
[ "${verbosed}" -ne 0 ] && echo "${initscript}: section ${section} starting ${PROG} ${args}"
[ -s /etc/dropbear/dropbear_rsa_host_key -a \
-s /etc/dropbear/dropbear_dss_host_key ] || keygen
+ include /lib/network
+ scan_interfaces
config_load "${NAME}"
config_foreach dropbear_start dropbear
}