Re: [Shorewall-devel] Capturing capabilities and rc file on remote system

2018-03-15 Thread Tom Eastep
Hi Matt, On 03/15/2018 11:05 AM, Matt Darfeuille wrote: > Hi Tom, > > On 3/15/2018 12:10 AM, Tom Eastep wrote: >> On 03/14/2018 04:02 PM, Tom Eastep wrote: >> >>> >>> Rather than the -C option, I would prefer that you implement a >>> 'remote-getcaps' command. It can still call remote_reload_comma

Re: [Shorewall-devel] Capturing capabilities and rc file on remote system

2018-03-15 Thread Matt Darfeuille
Hi Tom, On 3/15/2018 12:10 AM, Tom Eastep wrote: > On 03/14/2018 04:02 PM, Tom Eastep wrote: > >> >> Rather than the -C option, I would prefer that you implement a >> 'remote-getcaps' command. It can still call remote_reload_command() (or >> remote_command() as in your third patch). Be sure to up

Re: [Shorewall-devel] Capturing capabilities and rc file on remote system

2018-03-14 Thread Tom Eastep
On 03/14/2018 04:02 PM, Tom Eastep wrote: > > Rather than the -C option, I would prefer that you implement a > 'remote-getcaps' command. It can still call remote_reload_command() (or > remote_command() as in your third patch). Be sure to update the > 'usage()' function in lib.cli to include that

Re: [Shorewall-devel] Capturing capabilities and rc file on remote system

2018-03-14 Thread Tom Eastep
Hi Matt, On 03/14/2018 10:16 AM, Matt Darfeuille wrote: > Hi, > > Root access is configured on my shorewall-lite system to only allow > restricted commands. Based on those restrictions I'm looking for a way > to let shorewall capture the capabilities and the rc file on that remote > system. The

[Shorewall-devel] Capturing capabilities and rc file on remote system

2018-03-14 Thread Matt Darfeuille
Hi, Root access is configured on my shorewall-lite system to only allow restricted commands. Based on those restrictions I'm looking for a way to let shorewall capture the capabilities and the rc file on that remote system. The '-c' option to the remote-* command is close to what I want with the