Add entries for dnscrypt-proxy and hostip to the application firewall.

2012-09-28 21:51:45 +02:00
parent 1953182435
commit 4ee0bee8bf
2 changed files with 18 additions and 0 deletions
@@ -3,4 +3,7 @@
 . ./common.inc

 rm -f "$QUERY_LOG_FILE"
+
+./clear-fw.sh
+
 exec ./handle-control-change.sh --boot
@@ -0,0 +1,15 @@
+#! /bin/sh
+
+. ./common.inc
+
+exec >/dev/null
+exec 2>&1
+
+SOCKETFILTERFW='/usr/libexec/ApplicationFirewall/socketfilterfw'
+[ ! -x "$SOCKETFILTERFW" ] && exit 0
+
+"$SOCKETFILTERFW" --add        /usr/local/sbin/dnscrypt-proxy
+"$SOCKETFILTERFW" --unblockapp /usr/local/sbin/dnscrypt-proxy
+
+"$SOCKETFILTERFW" --add        /usr/local/bin/hostip
+"$SOCKETFILTERFW" --unblockapp /usr/local/bin/hostip