From 5f653cf0b95780cd22bdf2d077f19c7498d0abe0 Mon Sep 17 00:00:00 2001
From: Franco Fichtner <franco@opnsense.org>
Date: Mon, 27 Mar 2017 06:29:24 +0200
Subject: [PATCH] ipsec: put back the lock, because...

rc.newwanip, rc.newwanipv6, interface_configure() and interfaces_configure()
all call ipsec_configure_do(), which is no wonder why the code can be prone
to races.
---
 src/etc/rc.newipsecdns | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/etc/rc.newipsecdns b/src/etc/rc.newipsecdns
index 50a0ff572..7f189b5a0 100755
--- a/src/etc/rc.newipsecdns
+++ b/src/etc/rc.newipsecdns
@@ -45,4 +45,6 @@ if (file_exists('/var/run/booting')) {
     return;
 }
 
+$ipseclck = lock('ipsecdns', LOCK_EX);
 ipsec_configure_do(true);
+unlock($ipseclck);