I think that Charles's suggestion about using two packages makes this a bit more friendly. The main problem that I see with that approach is that it doesn't allow any way for me to add a new config file in the future and have it reflected in the Shorewall configuration menu.
Are you referring to the lrcfg configuration menu, created from the <package>.conf files in /var/lib/lrpkg?
Yes.
If so, I think you can 'cheat', within limits. If both the main and configuration shorewall packages are distributed as a unit and always used as a pair (except maybe by folks who really know what they're doing), I don't think there would be a problem with making the *.conf file part of the main shorewall package, rather than the config package.
If people always install these packages in pairs then we may as well just keep the single package. I suppose that when a new configuration file is added, we can have the user manaually copy the new file from /etc/shorewall to /etc/shorewalluser then back up the swuser package.
While it might seem odd to have the <package>.conf file in a different package than the actual files it's setup to edit, it really makes sense when you consider the second package is for actual user-modified configuration files, rather than being a true stand-alone package. The <package>.conf file is *NOT* a user-modified config file, so putting it in the main shorewall package seems reasonable.
I agree. With the additional manual steps I've outlined above, this could be workable. People would just have to retrain themselves to backup swuser rather than shorwall.
I've even thought of making a packaging system that would do this sort of thing automatically, using for example <package>.lrp for the released package, and <package>.cfg for the user-modified files. This would only take a very slight re-working of my current backup scripts to implement.
I have not yet done anything like this because:
- I don't really need it personally (the current scripts work well for CD-ROM based systems, which is mainly what I run).
- I don't have a lot of time for development (8 month old twins!)
- I don't want to pull the rug out from under the new configuration scheme and hopefully a more full-featured packaging system.
Nod.
-Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED]
------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________ leaf-devel mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-devel
