From 9fc9ec766ff2f171f20b5a7aca2519bc52769875 Mon Sep 17 00:00:00 2001
From: Mikhail Zabaluev <mikhail.zabaluev@gmail.com>
Date: Fri, 8 Jun 2018 09:40:42 +0300
Subject: [PATCH] Disable bypass-lan by default in daemon configuration

---
 strongswan.spec | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/strongswan.spec b/strongswan.spec
index 673db13..f9e257c 100644
--- a/strongswan.spec
+++ b/strongswan.spec
@@ -169,6 +169,11 @@ PT-TLS to support TNC over TLS.
 %endif
     --enable-kernel-libipsec
 
+# disable certain plugins in the daemon configuration by default
+for p in bypass-lan; do
+    echo -e "\ncharon.plugins.${p}.load := no" >> conf/plugins/${p}.opt
+done
+
 make %{?_smp_mflags}
 
 %install