smeserver-libreswan/contribs9/smeserver-libreswan.spec

%define name smeserver-libreswan
%define version 0.5
%define release 33
Summary: Plugin to enable IPSEC connections
Name: %{name}
Version: %{version}
Release: %{release}%{?dist}
License: GNU GPL version 2
URL: http://libreswan.org/
Group: SMEserver/addon
Source: %{name}-%{version}.tar.gz
Patch1: smeserver-libreswan-fix-masq-templates.patch
Patch2: smeserver-libreswan-move-logfile.patch
Patch3: smeserver-libreswan-add-debug-key.patch
Patch4: smeserver-libreswan-fix-rsa-id.patch
Patch5: smeserver-libreswan-fix-createlinks.patch
Patch6: smeserver-libreswan-ikev2-logrotate.patch
Patch7: smeserver-libreswan-add-certificates.patch
Patch8: smeserver-libreswan-modify-identifiers.patch
Patch9: smeserver-libreswan-modify-identifiers1.patch
Patch10: smeserver-libreswan-forceencaps-l2tpd.patch
Patch11: smeserver-libreswan-variable-network-interfaces.patch
Patch12: smeserver-libreswan-remove-obsoletes.patch
Patch13: smeserver-libreswan-add-reauth.patch
Patch14: smeserver-libreswan-check-l2tpd-status.patch
Patch15: smeserver-libreswan-include-l2tpd-rightsubnet.patch
Patch16: smeserver-libreswan-fix-xl2tpd-status-check.patch
Patch17: smeserver-libreswan-createlinks.patch

BuildRoot: /var/tmp/%{name}-%{version}
BuildArchitectures: noarch
BuildRequires: e-smith-devtools
Requires:  e-smith-release >= 9.2
Requires:  libreswan >= 3.29
AutoReqProv: no

%description
Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")

%changelog
* Tue Feb 14 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-33.sme
- update keyingtries
- update virtual-private

* Thu Jan 30 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-32.sme
- Fix xl2tpd status check

* Thu Oct 17 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-31.sme
- Allow rightsubnet for xl2tpd in virtual_private
- Add check for empty virtual_private hosts

* Sun Oct 13 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-30.sme
- Fix issue when there is no xl2tpd key

* Sat Aug 31 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-29.sme
- Bump required Libreswan to 3.29
- add reauth option

* Thu Jun 21 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-28.sme
- Bump required Libreswan to 3.23
- Change forceencaps to encapsulation
- Remove obsolete nat_traversal
- Modify ipsec.conf for no rightsubnet in xl2tpd

* Tue Sep 19 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-27.sme
- Allow variable network interface names - Stefano Zamboni

* Thu Jun 15 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-26.sme
- add keep-alive option in main ipsec.conf
- add forceencaps option overall default and per connection
- small code tidy
- Add support for L2TPD

* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-25.sme
 - Fix the ipsec.conf as well
 - remove automatic \@ in IDs - Fixes [SME: 9729]
 
* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-24.sme
 - remove automatic \@ in IDs - Fixes [SME: 9729]
 - fix swapped left/right IDs in password file

* Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme
- Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942]
- lots of code tidying

* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme
- update logrotate completely now I realise it is symlinked
- remove UPDPort and add UPDPorts due to ipsec v2

* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme
- add more variations for ike v1/2
- remove logrotate template
- add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log
- Fix some log noise when first installed and still disabled

* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme
- Fix typo in createlinks for sysctl.conf

* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme
- Fix ID in ipsec.secrets if ID is set

* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme
- Add debug db key to /etc/ipsec.conf
- Remove setting public/private keys as they won't affect unless templates are re-expanded
- Set xfrm_larval_drop drop correctly

* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme
- Move pluto.log to /var/log/pluto
- bump libreswan requires version to 3.16
- regenerate masq template on ipsec-update
- change wiki location page
- add sysctl.conf template
- modify masq templates for ipsec status enabled/disabled
- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf

* Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme
- Fix masq templates for missing db entries on install

* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
- first import in SME buildsys

* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
- Fix small typo in readme

* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
- Add keyingtries
- Finally fix add issues using asynchronous

* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
- Determine host IPtype - static or dynamic IP
- auto --up changed to exec
- Add checks for Left/Right ID in secrets file

* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
- Allow dynamic addresses
- Add iptype
- disallow " in PSK passwords
- Revised logging messages

* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
- Amended templates to allow for rsasig. Early cert settings removed

* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
- Revised masq templates - disable on ipsec disable
- Template ipsec.secrets so Terry won't break it again
- Set requires e-smith >=9 and libreswan >=3.14

* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
- add 90adjustESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
- more update to masq firewalls - change -p 50 to -p ESP

* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
- update masq firewall rules
- document clean up

* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
- set dpd actions off if ipsec is 'add'
- add salifetime key and rename ikelifetime and keylife
- change defaults for salifetime and ikelifetime
- add in rsasig support

* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
- change default ike from aes-sha to aes-sha1

* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
- More minor fixes - should work OK with xl2tpd

* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
- Remove templates2expand and added to createlinks
- modified ipsec.secret template
- various other fixes

* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
- Big changes again - now have PreviousState to detect changes
- Createlinks to S10 to run after expand-templates

* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
- Changed lots. Removed sysctl.conf template
- Changed firewall template

* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
- Load of code tidying and prep from xl2tpd

* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
- Update action script and allow for system not in gateway mode
- add ike and phase2alg db settings

* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
- New ipsec-action script
- Numerous template changes

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
- remove debugging lines
- remove expand templates from spec file
- add status check for ipsec.conf
- add comment to masq template
- updated db defaults
- ipsec.conf not expanded on install
- missed auto=start

* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
- remove rc.local modifications
- add /etc/sysctl.conf patches

* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
- initial release

%prep
%setup
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
%patch10 -p1
%patch11 -p1
%patch12 -p1
%patch13 -p1
%patch14 -p1
%patch15 -p1
%patch16 -p1
%patch17 -p1

%build
perl createlinks

%install
rm -rf $RPM_BUILD_ROOT
(cd root ; find . -depth -print | cpio -dump $RPM_BUILD_ROOT)
rm -f %{name}-%{version}-filelist
/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
echo "%doc COPYING" >> %{name}-%{version}-filelist


%clean
cd ..
rm -rf %{name}-%{version}

%files -f %{name}-%{version}-filelist
%defattr(-,root,root)

%pre
%preun
%post

/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q


echo "see https://wiki.contribs.org/Libreswan"

%postun
/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
/sbin/e-smith/expand-template /etc/inittab
/sbin/init q
1	unnilennium	1.1	%define name smeserver-libreswan
2			%define version 0.5
3	jcrisp	1.20	%define release 33
4	unnilennium	1.1	Summary: Plugin to enable IPSEC connections
5			Name: %{name}
6			Version: %{version}
7	unnilennium	1.3	Release: %{release}%{?dist}
8	unnilennium	1.1	License: GNU GPL version 2
9			URL: http://libreswan.org/
10			Group: SMEserver/addon
11			Source: %{name}-%{version}.tar.gz
12	reetspetit	1.4	Patch1: smeserver-libreswan-fix-masq-templates.patch
13	reetspetit	1.5	Patch2: smeserver-libreswan-move-logfile.patch
14	reetspetit	1.6	Patch3: smeserver-libreswan-add-debug-key.patch
15	reetspetit	1.7	Patch4: smeserver-libreswan-fix-rsa-id.patch
16	reetspetit	1.8	Patch5: smeserver-libreswan-fix-createlinks.patch
17	reetspetit	1.9	Patch6: smeserver-libreswan-ikev2-logrotate.patch
18	reetspetit	1.10	Patch7: smeserver-libreswan-add-certificates.patch
19	reetspetit	1.11	Patch8: smeserver-libreswan-modify-identifiers.patch
20	reetspetit	1.12	Patch9: smeserver-libreswan-modify-identifiers1.patch
21	reetspetit	1.13	Patch10: smeserver-libreswan-forceencaps-l2tpd.patch
22	reetspetit	1.14	Patch11: smeserver-libreswan-variable-network-interfaces.patch
23	jcrisp	1.15	Patch12: smeserver-libreswan-remove-obsoletes.patch
24	jcrisp	1.16	Patch13: smeserver-libreswan-add-reauth.patch
25	jcrisp	1.17	Patch14: smeserver-libreswan-check-l2tpd-status.patch
26	jcrisp	1.18	Patch15: smeserver-libreswan-include-l2tpd-rightsubnet.patch
27	jcrisp	1.19	Patch16: smeserver-libreswan-fix-xl2tpd-status-check.patch
28	jcrisp	1.20	Patch17: smeserver-libreswan-createlinks.patch
29	reetspetit	1.9
30	unnilennium	1.1	BuildRoot: /var/tmp/%{name}-%{version}
31			BuildArchitectures: noarch
32			BuildRequires: e-smith-devtools
33	jcrisp	1.15	Requires: e-smith-release >= 9.2
34	jcrisp	1.16	Requires: libreswan >= 3.29
35	unnilennium	1.1	AutoReqProv: no
36
37			%description
38			Libreswan is a free software implementation of the most widely supported and standardised VPN protocol based on ("IPsec") and the Internet Key Exchange ("IKE")
39
40			%changelog
41	jcrisp	1.20	* Tue Feb 14 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-33.sme
42			- update keyingtries
43			- update virtual-private
44
45	jcrisp	1.19	* Thu Jan 30 2020 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-32.sme
46			- Fix xl2tpd status check
47
48	jcrisp	1.18	* Thu Oct 17 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-31.sme
49			- Allow rightsubnet for xl2tpd in virtual_private
50			- Add check for empty virtual_private hosts
51
52	jcrisp	1.17	* Sun Oct 13 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-30.sme
53			- Fix issue when there is no xl2tpd key
54
55	jcrisp	1.16	* Sat Aug 31 2019 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-29.sme
56			- Bump required Libreswan to 3.29
57			- add reauth option
58
59	jcrisp	1.15	* Thu Jun 21 2018 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-28.sme
60			- Bump required Libreswan to 3.23
61	jcrisp	1.16	- Change forceencaps to encapsulation
62	jcrisp	1.15	- Remove obsolete nat_traversal
63			- Modify ipsec.conf for no rightsubnet in xl2tpd
64
65	reetspetit	1.14	* Tue Sep 19 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-27.sme
66			- Allow variable network interface names - Stefano Zamboni
67	reetspetit	1.13
68			* Thu Jun 15 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-26.sme
69			- add keep-alive option in main ipsec.conf
70			- add forceencaps option overall default and per connection
71			- small code tidy
72			- Add support for L2TPD
73
74	reetspetit	1.12	* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-25.sme
75			- Fix the ipsec.conf as well
76			- remove automatic \@ in IDs - Fixes [SME: 9729]
77
78	reetspetit	1.11	* Thu Jan 26 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-24.sme
79			- remove automatic \@ in IDs - Fixes [SME: 9729]
80			- fix swapped left/right IDs in password file
81
82	reetspetit	1.10	* Wed Jan 25 2017 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-23.sme
83			- Add the ability to use PEM/PKCS#12 certificates - fixes [SME: 9942]
84			- lots of code tidying
85
86	reetspetit	1.9	* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-22.sme
87			- update logrotate completely now I realise it is symlinked
88			- remove UPDPort and add UPDPorts due to ipsec v2
89
90			* Wed Dec 21 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-21.sme
91			- add more variations for ike v1/2
92			- remove logrotate template
93			- add /etc/e-smith/events/logrotate/logfiles2timestamp/var/log/pluto.log
94			- Fix some log noise when first installed and still disabled
95
96	reetspetit	1.8	* Sat Apr 23 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-20.sme
97			- Fix typo in createlinks for sysctl.conf
98	reetspetit	1.7
99			* Mon Apr 04 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-19.sme
100			- Fix ID in ipsec.secrets if ID is set
101
102	reetspetit	1.6	* Thu Mar 24 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-18.sme
103			- Add debug db key to /etc/ipsec.conf
104			- Remove setting public/private keys as they won't affect unless templates are re-expanded
105	reetspetit	1.7	- Set xfrm_larval_drop drop correctly
106	reetspetit	1.6
107	reetspetit	1.5	* Tue Mar 22 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-17.sme
108			- Move pluto.log to /var/log/pluto
109			- bump libreswan requires version to 3.16
110			- regenerate masq template on ipsec-update
111			- change wiki location page
112			- add sysctl.conf template
113			- modify masq templates for ipsec status enabled/disabled
114			- only load ipsec.conf rather than *.conf to avoid loading v6neighbor-hole.conf
115
116	reetspetit	1.4	* Thu Mar 10 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-16.sme
117			- Fix masq templates for missing db entries on install
118
119	unnilennium	1.3	* Wed Mar 09 2016 JP Pialasse <tests@pialasse.com> 0.5-15.sme
120	unnilennium	1.2	- first import in SME buildsys
121
122	unnilennium	1.1	* Wed Feb 17 2016 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-13
123			- Fix small typo in readme
124
125			* Fri Dec 04 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-12
126			- Add keyingtries
127			- Finally fix add issues using asynchronous
128
129			* Wed Dec 02 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-11
130			- Determine host IPtype - static or dynamic IP
131			- auto --up changed to exec
132			- Add checks for Left/Right ID in secrets file
133
134			* Tue Dec 01 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-10
135			- Allow dynamic addresses
136			- Add iptype
137			- disallow " in PSK passwords
138			- Revised logging messages
139
140			* Mon Nov 30 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-9
141			- Amended templates to allow for rsasig. Early cert settings removed
142
143			* Wed Nov 25 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-8
144			- Revised masq templates - disable on ipsec disable
145			- Template ipsec.secrets so Terry won't break it again
146			- Set requires e-smith >=9 and libreswan >=3.14
147
148			* Wed Nov 18 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-7
149			- add 90adjustESP
150
151			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-6
152			- more update to masq firewalls - change -p 50 to -p ESP
153
154			* Tue Nov 17 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-5
155			- update masq firewall rules
156			- document clean up
157
158			* Wed May 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-4
159			- set dpd actions off if ipsec is 'add'
160			- add salifetime key and rename ikelifetime and keylife
161			- change defaults for salifetime and ikelifetime
162			- add in rsasig support
163
164			* Wed Apr 22 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-3
165			- change default ike from aes-sha to aes-sha1
166
167			* Tue Mar 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-2
168			- More minor fixes - should work OK with xl2tpd
169
170			* Thu Mar 19 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.5-1
171			- Remove templates2expand and added to createlinks
172			- modified ipsec.secret template
173			- various other fixes
174
175			* Fri Mar 13 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-5
176			- Big changes again - now have PreviousState to detect changes
177			- Createlinks to S10 to run after expand-templates
178
179			* Thu Mar 5 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-4
180			- Changed lots. Removed sysctl.conf template
181			- Changed firewall template
182
183			* Tue Mar 3 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-3
184			- Load of code tidying and prep from xl2tpd
185
186			* Fri Feb 27 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-2
187			- Update action script and allow for system not in gateway mode
188			- add ike and phase2alg db settings
189
190			* Tue Feb 24 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.4-1
191			- New ipsec-action script
192			- Numerous template changes
193
194			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.3-1
195			- remove debugging lines
196			- remove expand templates from spec file
197			- add status check for ipsec.conf
198			- add comment to masq template
199			- updated db defaults
200			- ipsec.conf not expanded on install
201			- missed auto=start
202
203			* Fri Jan 16 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.2-1
204			- remove rc.local modifications
205			- add /etc/sysctl.conf patches
206
207			* Thu Jan 15 2015 John Crisp <jcrisp@safeandsoundit.co.uk> 0.1-1
208			- initial release
209
210			%prep
211			%setup
212	reetspetit	1.4	%patch1 -p1
213	reetspetit	1.5	%patch2 -p1
214	reetspetit	1.6	%patch3 -p1
215	reetspetit	1.7	%patch4 -p1
216	reetspetit	1.8	%patch5 -p1
217	reetspetit	1.9	%patch6 -p1
218	reetspetit	1.10	%patch7 -p1
219	reetspetit	1.11	%patch8 -p1
220	reetspetit	1.12	%patch9 -p1
221	reetspetit	1.13	%patch10 -p1
222	reetspetit	1.14	%patch11 -p1
223	jcrisp	1.15	%patch12 -p1
224	jcrisp	1.16	%patch13 -p1
225	jcrisp	1.17	%patch14 -p1
226	jcrisp	1.18	%patch15 -p1
227	jcrisp	1.19	%patch16 -p1
228	jcrisp	1.20	%patch17 -p1
229	unnilennium	1.1
230			%build
231			perl createlinks
232
233			%install
234			rm -rf $RPM_BUILD_ROOT
235			(cd root ; find . -depth -print \| cpio -dump $RPM_BUILD_ROOT)
236			rm -f %{name}-%{version}-filelist
237			/sbin/e-smith/genfilelist $RPM_BUILD_ROOT > %{name}-%{version}-filelist
238			echo "%doc COPYING" >> %{name}-%{version}-filelist
239
240
241			%clean
242			cd ..
243			rm -rf %{name}-%{version}
244
245			%files -f %{name}-%{version}-filelist
246			%defattr(-,root,root)
247
248			%pre
249			%preun
250			%post
251	reetspetit	1.6
252	unnilennium	1.1	/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
253			/sbin/e-smith/expand-template /etc/inittab
254			/sbin/init q
255
256
257	reetspetit	1.11	echo "see https://wiki.contribs.org/Libreswan"
258	unnilennium	1.1
259			%postun
260			/sbin/e-smith/expand-template /etc/rc.d/init.d/masq
261			/sbin/e-smith/expand-template /etc/inittab
262			/sbin/init q