From 5eacb956226f60b249f281bf81ea89dc1f53fb8f Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Mon, 16 Oct 2017 22:42:08 +0200
Subject: [PATCH] interfaces: mitigate KRACKAttacks by using ports if available

Also see: https://www.krackattacks.com/
---
 src/etc/inc/interfaces.inc | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/etc/inc/interfaces.inc b/src/etc/inc/interfaces.inc
index 6795cd069..219d14b8e 100644
--- a/src/etc/inc/interfaces.inc
+++ b/src/etc/inc/interfaces.inc
@@ -2068,11 +2068,11 @@ function interface_wireless_configure($if, &$wl, &$wlcfg)
     fwrite($fd_set, "# wireless configuration script.\n\n");
 
     /* set values for /path/program */
-    $hostapd = "/usr/sbin/hostapd";
-    $wpa_supplicant = "/usr/sbin/wpa_supplicant";
-    $ifconfig = "/sbin/ifconfig";
-    $sysctl = "/sbin/sysctl";
-    $killall = "/usr/bin/killall";
+    $wpa_supplicant = file_exists('/usr/local/sbin/wpa_supplicant') ? '/usr/local/sbin/wpa_supplicant' : '/usr/sbin/wpa_supplicant';
+    $hostapd = file_exists('/usr/local/sbin/hostapd') ? '/usr/local/sbin/hostapd' : '/usr/sbin/hostapd';
+    $killall = '/usr/bin/killall';
+    $ifconfig = '/sbin/ifconfig';
+    $sysctl = '/sbin/sysctl';
 
     /* Set all wireless ifconfig variables (split up to get rid of needed checking) */