dnsmasq: write atomic config file
[librecmc/librecmc.git] / package / network / services / dnsmasq / files / dnsmasq.init
1 #!/bin/sh /etc/rc.common
2 # Copyright (C) 2007-2012 OpenWrt.org
3
4 START=60
5
6 USE_PROCD=1
7 PROG=/usr/sbin/dnsmasq
8
9 DNS_SERVERS=""
10 DOMAIN=""
11
12 ADD_LOCAL_DOMAIN=1
13 ADD_LOCAL_HOSTNAME=1
14
15 CONFIGFILE="/var/etc/dnsmasq.conf"
16 CONFIGFILE_TMP="/var/etc/dnsmasq.conf.$$"
17 HOSTFILE="/tmp/hosts/dhcp"
18 TRUSTANCHORSFILE="/usr/share/dnsmasq/trust-anchors.conf"
19 TIMESTAMPFILE="/etc/dnsmasq.time"
20 TIMEVALIDFILE="/var/state/dnsmasqsec"
21
22 xappend() {
23         local value="$1"
24
25         echo "${value#--}" >> $CONFIGFILE_TMP
26 }
27
28 hex_to_hostid() {
29         local var="$1"
30         local hex="${2#0x}"     # strip optional "0x" prefix
31
32         if [ -n "${hex//[0-9a-fA-F]/}" ]; then
33                 # is invalid hex literal
34                 return 1
35         fi
36
37         # convert into host id
38         export "$var=$(
39                 printf "%0x:%0x"  \
40                         $(((0x$hex >> 16) % 65536)) \
41                         $(( 0x$hex        % 256))
42         )"
43
44         return 0
45 }
46
47 dhcp_calc() {
48         local ip="$1"
49         local res=0
50
51         while [ -n "$ip" ]; do
52                 part="${ip%%.*}"
53                 res="$(($res * 256))"
54                 res="$(($res + $part))"
55                 [ "${ip%.*}" != "$ip" ] && ip="${ip#*.}" || ip=
56         done
57         echo "$res"
58 }
59
60 dhcp_check() {
61         local ifname="$1"
62         local stamp="/var/run/dnsmasq.$ifname.dhcp"
63         local rv=0
64
65         [ -s "$stamp" ] && return $(cat "$stamp")
66
67         udhcpc -n -q -s /bin/true -t 1 -i "$ifname" >&- && rv=1 || rv=0
68
69         [ $rv -eq 1 ] && \
70                 logger -t dnsmasq \
71                         "found already running DHCP-server on interface '$ifname'" \
72                         "refusing to start, use 'option force 1' to override"
73
74         echo $rv > "$stamp"
75         return $rv
76 }
77
78 log_once() {
79         pidof dnsmasq >/dev/null || \
80                 logger -t dnsmasq "$@"
81 }
82
83 append_bool() {
84         local section="$1"
85         local option="$2"
86         local value="$3"
87         local _loctmp
88         config_get_bool _loctmp "$section" "$option" 0
89         [ $_loctmp -gt 0 ] && xappend "$value"
90 }
91
92 append_parm() {
93         local section="$1"
94         local option="$2"
95         local switch="$3"
96         local default="$4"
97         local _loctmp
98         config_get _loctmp "$section" "$option" "$default"
99         [ -z "$_loctmp" ] && return 0
100         xappend "$switch=$_loctmp"
101 }
102
103 append_server() {
104         xappend "--server=$1"
105 }
106
107 append_address() {
108         xappend "--address=$1"
109 }
110
111 append_ipset() {
112         xappend "--ipset=$1"
113 }
114
115 append_interface() {
116         local ifname=$(uci_get_state network "$1" ifname "$1")
117         xappend "--interface=$ifname"
118 }
119
120 append_notinterface() {
121         local ifname=$(uci_get_state network "$1" ifname "$1")
122         xappend "--except-interface=$ifname"
123 }
124
125 append_addnhosts() {
126         xappend "--addn-hosts=$1"
127 }
128
129 append_bogusnxdomain() {
130         xappend "--bogus-nxdomain=$1"
131 }
132
133 append_pxe_service() {
134         xappend "--pxe-service=$1"
135 }
136
137 dnsmasq() {
138         local cfg="$1"
139         append_bool "$cfg" authoritative "--dhcp-authoritative"
140         append_bool "$cfg" nodaemon "--no-daemon"
141         append_bool "$cfg" domainneeded "--domain-needed"
142         append_bool "$cfg" filterwin2k "--filterwin2k"
143         append_bool "$cfg" nohosts "--no-hosts"
144         append_bool "$cfg" nonegcache "--no-negcache"
145         append_bool "$cfg" strictorder "--strict-order"
146         append_bool "$cfg" logqueries "--log-queries=extra"
147         append_bool "$cfg" noresolv "--no-resolv"
148         append_bool "$cfg" localise_queries "--localise-queries"
149         append_bool "$cfg" readethers "--read-ethers"
150         append_bool "$cfg" dbus "--enable-dbus"
151         append_bool "$cfg" boguspriv "--bogus-priv"
152         append_bool "$cfg" expandhosts "--expand-hosts"
153         config_get tftp_root "$cfg" "tftp_root"
154         [ -d "$tftp_root" ] && append_bool "$cfg" enable_tftp "--enable-tftp"
155         append_bool "$cfg" tftp_no_fail "--tftp-no-fail"
156         append_bool "$cfg" nonwildcard "--bind-dynamic"
157         append_bool "$cfg" fqdn "--dhcp-fqdn"
158         append_bool "$cfg" proxydnssec "--proxy-dnssec"
159         append_bool "$cfg" localservice "--local-service"
160         append_bool "$cfg" quietdhcp "--quiet-dhcp"
161         append_bool "$cfg" sequential_ip "--dhcp-sequential-ip"
162         append_bool "$cfg" allservers "--all-servers"
163         append_bool "$cfg" noping "--no-ping"
164
165         append_parm "$cfg" dhcpscript "--dhcp-script"
166         append_parm "$cfg" cachesize "--cache-size"
167         append_parm "$cfg" dnsforwardmax "--dns-forward-max"
168         append_parm "$cfg" port "--port"
169         append_parm "$cfg" ednspacket_max "--edns-packet-max"
170         append_parm "$cfg" dhcpleasemax "--dhcp-lease-max"
171         append_parm "$cfg" "queryport" "--query-port"
172         append_parm "$cfg" "minport" "--min-port"
173         append_parm "$cfg" "maxport" "--max-port"
174         append_parm "$cfg" "domain" "--domain"
175         append_parm "$cfg" "local" "--server"
176         config_list_foreach "$cfg" "server" append_server
177         config_list_foreach "$cfg" "address" append_address
178         config_list_foreach "$cfg" "ipset" append_ipset
179         config_list_foreach "$cfg" "interface" append_interface
180         config_list_foreach "$cfg" "notinterface" append_notinterface
181         config_list_foreach "$cfg" "addnhosts" append_addnhosts
182         config_list_foreach "$cfg" "bogusnxdomain" append_bogusnxdomain
183         append_parm "$cfg" "leasefile" "--dhcp-leasefile" "/tmp/dhcp.leases"
184         append_parm "$cfg" "resolvfile" "--resolv-file" "/tmp/resolv.conf.auto"
185         append_parm "$cfg" "serversfile" "--servers-file"
186         append_parm "$cfg" "tftp_root" "--tftp-root"
187         append_parm "$cfg" "dhcp_boot" "--dhcp-boot"
188         append_parm "$cfg" "local_ttl" "--local-ttl"
189         append_parm "$cfg" "pxe_prompt" "--pxe-prompt"
190         config_list_foreach "$cfg" "pxe_service" append_pxe_service
191         config_get DOMAIN "$cfg" domain
192
193         config_get_bool ADD_LOCAL_DOMAIN "$cfg" add_local_domain 1
194         config_get_bool ADD_LOCAL_HOSTNAME "$cfg" add_local_hostname 1
195
196         config_get_bool readethers "$cfg" readethers
197         [ "$readethers" = "1" -a \! -e "/etc/ethers" ] && touch /etc/ethers
198
199         config_get leasefile $cfg leasefile "/tmp/dhcp.leases"
200         [ -n "$leasefile" -a \! -e "$leasefile" ] && touch "$leasefile"
201         config_get_bool cachelocal "$cfg" cachelocal 1
202
203         config_get_bool noresolv "$cfg" noresolv 0
204         if [ "$noresolv" != "1" ]; then
205                 config_get resolvfile "$cfg" resolvfile "/tmp/resolv.conf.auto"
206                 # So jail doesn't complain if file missing
207                 [ -n "$resolvfile" -a \! -e "$resolvfile" ] && touch "$resolvfile"
208         fi
209
210         config_get hostsfile "$cfg" dhcphostsfile
211         [ -e "$hostsfile" ] && xappend "--dhcp-hostsfile=$hostsfile"
212
213         local rebind
214         config_get_bool rebind "$cfg" rebind_protection 1
215         [ $rebind -gt 0 ] && {
216                 log_once \
217                         "DNS rebinding protection is active," \
218                         "will discard upstream RFC1918 responses!"
219                 xappend "--stop-dns-rebind"
220
221                 local rebind_localhost
222                 config_get_bool rebind_localhost "$cfg" rebind_localhost 0
223                 [ $rebind_localhost -gt 0 ] && {
224                         log_once "Allowing 127.0.0.0/8 responses"
225                         xappend "--rebind-localhost-ok"
226                 }
227
228                 append_rebind_domain() {
229                         log_once "Allowing RFC1918 responses for domain $1"
230                         xappend "--rebind-domain-ok=$1"
231                 }
232
233                 config_list_foreach "$cfg" rebind_domain append_rebind_domain
234         }
235
236         config_get_bool dnssec "$cfg" dnssec 0
237         [ "$dnssec" -gt 0 ] && {
238                 xappend "--conf-file=$TRUSTANCHORSFILE"
239                 xappend "--dnssec"
240                 [ -x /etc/init.d/sysntpd ] && {
241                         /etc/init.d/sysntpd enabled
242                         [ "$?" -ne 0 -o "$(uci_get system.ntp.enabled)" = "1" ] && {
243                                 [ -f "$TIMEVALIDFILE" ] || xappend "--dnssec-no-timecheck"
244                         }
245                 }
246                 append_bool "$cfg" dnsseccheckunsigned "--dnssec-check-unsigned"
247         }
248
249         dhcp_option_add "$cfg" "" 0
250
251         xappend "--dhcp-broadcast=tag:needs-broadcast"
252
253         mkdir -p /tmp/hosts /tmp/dnsmasq.d
254         xappend "--addn-hosts=/tmp/hosts"
255         xappend "--conf-dir=/tmp/dnsmasq.d"
256         xappend "--user=dnsmasq"
257         xappend "--group=dnsmasq"
258
259         echo >> $CONFIGFILE_TMP
260
261         config_get_bool enable_tftp "$cfg" enable_tftp 0
262         [ "$enable_tftp" -gt 0 ] && {
263                 config_get tftp_root "$cfg" tftp_root
264                 append EXTRA_MOUNT $tftp_root
265         }
266 }
267
268 dhcp_subscrid_add() {
269         local cfg="$1"
270
271         config_get networkid "$cfg" networkid
272         [ -n "$networkid" ] || return 0
273
274         config_get subscriberid "$cfg" subscriberid
275         [ -n "$subscriberid" ] || return 0
276
277         xappend "--dhcp-subscrid=$networkid,$subscriberid"
278
279         config_get_bool force "$cfg" force 0
280
281         dhcp_option_add "$cfg" "$networkid" "$force"
282 }
283
284 dhcp_remoteid_add() {
285         local cfg="$1"
286
287         config_get networkid "$cfg" networkid
288         [ -n "$networkid" ] || return 0
289
290         config_get remoteid "$cfg" remoteid
291         [ -n "$remoteid" ] || return 0
292
293         xappend "--dhcp-remoteid=$networkid,$remoteid"
294
295         config_get_bool force "$cfg" force 0
296
297         dhcp_option_add "$cfg" "$networkid" "$force"
298 }
299
300 dhcp_circuitid_add() {
301         local cfg="$1"
302
303         config_get networkid "$cfg" networkid
304         [ -n "$networkid" ] || return 0
305
306         config_get circuitid "$cfg" circuitid
307         [ -n "$circuitid" ] || return 0
308
309         xappend "--dhcp-circuitid=$networkid,$circuitid"
310
311         config_get_bool force "$cfg" force 0
312
313         dhcp_option_add "$cfg" "$networkid" "$force"
314 }
315
316 dhcp_userclass_add() {
317         local cfg="$1"
318
319         config_get networkid "$cfg" networkid
320         [ -n "$networkid" ] || return 0
321
322         config_get userclass "$cfg" userclass
323         [ -n "$userclass" ] || return 0
324
325         xappend "--dhcp-userclass=$networkid,$userclass"
326
327         config_get_bool force "$cfg" force 0
328
329         dhcp_option_add "$cfg" "$networkid" "$force"
330 }
331
332 dhcp_vendorclass_add() {
333         local cfg="$1"
334
335         config_get networkid "$cfg" networkid
336         [ -n "$networkid" ] || return 0
337
338         config_get vendorclass "$cfg" vendorclass
339         [ -n "$vendorclass" ] || return 0
340
341         xappend "--dhcp-vendorclass=$networkid,$vendorclass"
342
343         config_get_bool force "$cfg" force 0
344
345         dhcp_option_add "$cfg" "$networkid" "$force"
346 }
347
348 dhcp_host_add() {
349         local cfg="$1"
350
351         config_get_bool force "$cfg" force 0
352
353         config_get networkid "$cfg" networkid
354         [ -n "$networkid" ] && dhcp_option_add "$cfg" "$networkid" "$force"
355
356         config_get_bool enable "$cfg" enable 1
357         [ "$enable" = "0" ] && return 0
358
359         config_get name "$cfg" name
360         config_get ip "$cfg" ip
361         [ -n "$ip" -o -n "$name" ] || return 0
362
363         config_get_bool dns "$cfg" dns 0
364         [ "$dns" = "1" -a -n "$ip" -a -n "$name" ] && {
365                 echo "$ip $name${DOMAIN:+.$DOMAIN}" >> $HOSTFILE
366         }
367
368         config_get mac "$cfg" mac
369         if [ -n "$mac" ]; then
370                 # --dhcp-host=00:20:e0:3b:13:af,192.168.0.199,lap
371                 macs=""
372                 for m in $mac; do append macs "$m" ","; done
373         else
374                 # --dhcp-host=lap,192.168.0.199
375                 [ -n "$name" ] || return 0
376                 macs="$name"
377                 name=""
378         fi
379
380         config_get tag "$cfg" tag
381
382         if [ "$DHCPv6CAPABLE" -eq 1 ]; then
383                 config_get hostid "$cfg" hostid
384                 if [ -n "$hostid" ]; then
385                         hex_to_hostid hostid "$hostid"
386                 fi
387         fi
388
389         config_get_bool broadcast "$cfg" broadcast 0
390         [ "$broadcast" = "0" ] && broadcast=
391
392         config_get leasetime "$cfg" leasetime
393
394         xappend "--dhcp-host=$macs${networkid:+,net:$networkid}${broadcast:+,set:needs-broadcast}${tag:+,set:$tag}${ip:+,$ip${hostid:+,[::$hostid]}}${name:+,$name}${leasetime:+,$leasetime}"
395 }
396
397 dhcp_tag_add() {
398         local cfg="$1"
399
400         tag="$cfg"
401
402         [ -n "$tag" ] || return 0
403
404         config_get_bool force "$cfg" force 0
405         [ "$force" = "0" ] && force=
406
407         config_get option "$cfg" dhcp_option
408         for o in $option; do
409                 xappend "--dhcp-option${force:+-force}=tag:$tag,$o"
410         done
411 }
412
413 dhcp_mac_add() {
414         local cfg="$1"
415
416         config_get networkid "$cfg" networkid
417         [ -n "$networkid" ] || return 0
418
419         config_get mac "$cfg" mac
420         [ -n "$mac" ] || return 0
421
422         xappend "--dhcp-mac=$networkid,$mac"
423
424         dhcp_option_add "$cfg" "$networkid"
425 }
426
427 dhcp_boot_add() {
428         local cfg="$1"
429
430         config_get networkid "$cfg" networkid
431
432         config_get filename "$cfg" filename
433         [ -n "$filename" ] || return 0
434
435         config_get servername "$cfg" servername
436         config_get serveraddress "$cfg" serveraddress
437
438         [ -n "$serveraddress" -a ! -n "$servername" ] && return 0
439
440         xappend "--dhcp-boot=${networkid:+net:$networkid,}${filename}${servername:+,$servername}${serveraddress:+,$serveraddress}"
441
442         config_get_bool force "$cfg" force 0
443
444         dhcp_option_add "$cfg" "$networkid" "$force"
445 }
446
447
448 dhcp_add() {
449         local cfg="$1"
450         config_get net "$cfg" interface
451         [ -n "$net" ] || return 0
452
453         config_get dhcpv4 "$cfg" dhcpv4
454         [ "$dhcpv4" != "disabled" ] || return 0
455
456         config_get networkid "$cfg" networkid
457         [ -n "$networkid" ] || networkid="$net"
458
459         network_get_subnet subnet "$net" || return 0
460         network_get_device ifname "$net" || return 0
461         network_get_protocol proto "$net" || return 0
462
463         [ "$cachelocal" = "0" ] && network_get_dnsserver dnsserver "$net" && {
464                 DNS_SERVERS="$DNS_SERVERS $dnsserver"
465         }
466
467         append_bool "$cfg" ignore "--no-dhcp-interface=$ifname" && return 0
468
469         # Do not support non-static interfaces for now
470         [ static = "$proto" ] || return 0
471
472         # Override interface netmask with dhcp config if applicable
473         config_get netmask "$cfg" netmask "${subnet##*/}"
474
475         #check for an already active dhcp server on the interface, unless 'force' is set
476         config_get_bool force "$cfg" force 0
477         [ $force -gt 0 ] || dhcp_check "$ifname" || return 0
478
479         config_get start "$cfg" start
480         config_get limit "$cfg" limit
481         config_get leasetime "$cfg" leasetime
482         config_get options "$cfg" options
483         config_get_bool dynamicdhcp "$cfg" dynamicdhcp 1
484
485         leasetime="${leasetime:-12h}"
486         start="$(dhcp_calc "${start:-100}")"
487         limit="${limit:-150}"
488         [ "$limit" -gt 0 ] && limit=$((limit-1))
489         eval "$(ipcalc.sh "${subnet%%/*}" $netmask $start $limit)"
490         if [ "$dynamicdhcp" = "0" ]; then END="static"; fi
491         xappend "--dhcp-range=$networkid,$START,$END,$NETMASK,$leasetime${options:+ $options}"
492
493         dhcp_option_add "$cfg" "$networkid"
494 }
495
496 dhcp_option_add() {
497         local cfg="$1"
498         local networkid="$2"
499         local force="$3"
500
501         [ "$force" = "0" ] && force=
502
503         config_get dhcp_option "$cfg" dhcp_option
504         for o in $dhcp_option; do
505                 xappend "--dhcp-option${force:+-force}=${networkid:+$networkid,}$o"
506         done
507
508 }
509
510 dhcp_domain_add() {
511         local cfg="$1"
512         local ip name names record
513
514         config_get names "$cfg" name "$2"
515         [ -n "$names" ] || return 0
516
517         config_get ip "$cfg" ip "$3"
518         [ -n "$ip" ] || return 0
519
520         for name in $names; do
521                 record="${record:+$record }$name"
522         done
523
524         echo "$ip $record" >> $HOSTFILE
525 }
526
527 dhcp_srv_add() {
528         local cfg="$1"
529
530         config_get srv "$cfg" srv
531         [ -n "$srv" ] || return 0
532
533         config_get target "$cfg" target
534         [ -n "$target" ] || return 0
535
536         config_get port "$cfg" port
537         [ -n "$port" ] || return 0
538
539         config_get class "$cfg" class
540         config_get weight "$cfg" weight
541
542         local service="$srv,$target,$port${class:+,$class${weight:+,$weight}}"
543
544         xappend "--srv-host=$service"
545 }
546
547 dhcp_mx_add() {
548         local cfg="$1"
549         local domain relay pref
550
551         config_get domain "$cfg" domain
552         [ -n "$domain" ] || return 0
553
554         config_get relay "$cfg" relay
555         [ -n "$relay" ] || return 0
556
557         config_get pref "$cfg" pref 0
558
559         local service="$domain,$relay,$pref"
560
561         xappend "--mx-host=$service"
562 }
563
564 dhcp_cname_add() {
565         local cfg="$1"
566         local cname target
567
568         config_get cname "$cfg" cname
569         [ -n "$cname" ] || return 0
570
571         config_get target "$cfg" target
572         [ -n "$target" ] || return 0
573
574         xappend "--cname=${cname},${target}"
575 }
576
577 dhcp_hostrecord_add() {
578         local cfg="$1"
579         local names addresses record val
580
581         config_get names "$cfg" name "$2"
582         if [ -z "$names" ]; then
583                 return 0
584         fi
585
586         config_get addresses "$cfg" ip "$3"
587         if [ -z "$addresses" ]; then
588                 return 0
589         fi
590
591         for val in $names $addresses; do
592                 record="${record:+$record,}$val"
593         done
594
595         xappend "--host-record=$record"
596 }
597
598 dhcp_relay_add() {
599         local cfg="$1"
600         local local_addr server_addr interface
601
602         config_get local_addr "$cfg" local_addr
603         [ -n "$local_addr" ] || return 0
604
605         config_get server_addr "$cfg" server_addr
606         [ -n "$server_addr" ] || return 0
607
608         config_get interface "$cfg" interface
609         if [ -z "$interface" ]; then
610                 xappend "--dhcp-relay=$local_addr,$server_addr"
611         else
612                 xappend "--dhcp-relay=$local_addr,$server_addr,$interface"
613         fi
614 }
615
616 service_triggers()
617 {
618         procd_add_reload_trigger "dhcp"
619 }
620
621 boot() {
622         # Will be launched through hotplug
623         return 0
624 }
625
626 start_service() {
627         include /lib/functions
628
629         config_load dhcp
630
631         # before we can call xappend
632         mkdir -p /var/run/dnsmasq/
633         mkdir -p $(dirname $CONFIGFILE)
634         mkdir -p /var/lib/misc
635         touch /tmp/dhcp.leases
636
637         [ -f "$TIMESTAMPFILE" ] && rm -f "$TIMESTAMPFILE"
638
639         echo "# auto-generated config file from /etc/config/dhcp" > $CONFIGFILE_TMP
640         echo "# auto-generated config file from /etc/config/dhcp" > $HOSTFILE
641
642         # if we did this last, we could override auto-generated config
643         [ -f /etc/dnsmasq.conf ] && {
644                 xappend "--conf-file=/etc/dnsmasq.conf"
645         }
646
647         $PROG --version | grep -osqE "^Compile time options:.* DHCPv6( |$)" && DHCPv6CAPABLE=1 || DHCPv6CAPABLE=0
648
649         args=""
650         config_foreach dnsmasq dnsmasq
651         config_foreach dhcp_host_add host
652         echo >> $CONFIGFILE_TMP
653         config_foreach dhcp_boot_add boot
654         config_foreach dhcp_mac_add mac
655         config_foreach dhcp_tag_add tag
656         config_foreach dhcp_vendorclass_add vendorclass
657         config_foreach dhcp_userclass_add userclass
658         config_foreach dhcp_circuitid_add circuitid
659         config_foreach dhcp_remoteid_add remoteid
660         config_foreach dhcp_subscrid_add subscrid
661         config_foreach dhcp_domain_add domain
662         config_foreach dhcp_hostrecord_add hostrecord
663         config_foreach dhcp_relay_add relay
664
665         # add own hostname
666         [ $ADD_LOCAL_HOSTNAME -eq 1 ] && {
667                 local lanaddr lanaddr6
668                 local ulaprefix="$(uci_get network @globals[0] ula_prefix)"
669                 local hostname="$(uci_get system @system[0] hostname Lede)"
670
671                 network_get_ipaddr lanaddr "lan" && {
672                         dhcp_domain_add "" "$hostname" "$lanaddr"
673                 }
674
675                 [ -n "$ulaprefix" ] && network_get_ipaddrs6 lanaddr6 "lan" && {
676                         for lanaddr6 in $lanaddr6; do
677                                 case "$lanaddr6" in
678                                         "${ulaprefix%%:/*}"*)
679                                                 dhcp_domain_add "" "$hostname" "$lanaddr6"
680                                         ;;
681                                 esac
682                         done
683                 }
684         }
685
686         echo >> $CONFIGFILE_TMP
687         config_foreach dhcp_srv_add srvhost
688         config_foreach dhcp_mx_add mxhost
689         echo >> $CONFIGFILE_TMP
690
691         config_get odhcpd_is_active odhcpd maindhcp
692         if [ "$odhcpd_is_active" != "1" ]; then
693                 config_foreach dhcp_add dhcp
694         fi
695
696         echo >> $CONFIGFILE_TMP
697         config_foreach dhcp_cname_add cname
698         echo >> $CONFIGFILE_TMP
699         mv -f $CONFIGFILE_TMP $CONFIGFILE
700
701         rm -f /tmp/resolv.conf
702         [ $ADD_LOCAL_DOMAIN -eq 1 ] && [ -n "$DOMAIN" ] && {
703                 echo "search $DOMAIN" >> /tmp/resolv.conf
704         }
705         DNS_SERVERS="$DNS_SERVERS 127.0.0.1"
706         for DNS_SERVER in $DNS_SERVERS ; do
707                 echo "nameserver $DNS_SERVER" >> /tmp/resolv.conf
708         done
709
710         procd_open_instance
711         procd_set_param command $PROG -C $CONFIGFILE -k -x /var/run/dnsmasq/dnsmasq.pid
712         procd_set_param file $CONFIGFILE
713         procd_set_param respawn
714
715         procd_add_jail dnsmasq ubus log
716         procd_add_jail_mount $CONFIGFILE $TRUSTANCHORSFILE $HOSTFILE /etc/passwd /etc/group /etc/TZ /dev/null /dev/urandom /etc/dnsmasq.conf /tmp/dnsmasq.d /tmp/resolv.conf.auto /etc/hosts /etc/ethers $EXTRA_MOUNT
717         procd_add_jail_mount_rw /var/run/dnsmasq/ /tmp/dhcp.leases
718
719         procd_close_instance
720 }
721
722 reload_service() {
723         rc_procd start_service "$@"
724         return 0
725 }
726
727 stop_service() {
728         [ -f /tmp/resolv.conf ] && {
729                 rm -f /tmp/resolv.conf
730                 ln -s /tmp/resolv.conf.auto /tmp/resolv.conf
731         }
732         rm -f /var/run/dnsmasq.*.dhcp
733 }