Steven Jan Springl wrote:
> On Wednesday 16 May 2007 02:44, Tom Eastep wrote:
>> Steven Jan Springl wrote:
>>> On Wednesday 16 May 2007 02:24, Tom Eastep wrote:
>>>> Steven Jan Springl wrote:
>>>>> Tom
>>>>>
>>>>> Command:
>>>>>
>>>>>   shorewall check -e -C shell
>>>>>
>>>>> works.
>>>>>
>>>>> Command:
>>>>>
>>>>>   shorewall check -e -C perl
>>>>>
>>>>> produces message:
>>>>>
>>>>>   ERROR: the -e flag requires a capabilities file
>>>>>
>>>>>
>>>>> There is a capabilities file in /etc/shorewall.
>>>> Are you running as root or an ordinary user? And if running as an
>>>> ordinary user, is /etc/shorewall/capabilities readable by the ordinary
>>>> user?
>>>>
>>>> -Tom
>>> Tom
>>>
>>> I am running as root.
>> Steven,
>>
>> I'll have to think about this. Exporting your /etc/shorewall
>> configuration makes no sense at all but I want to consider the tradeoffs.
>>
>> -Tom
> Tom
> 
> I have just tried:
> 
>       shorewall check -e -C perl /etc/shorewall
> 
> and that works.

Yes. When you specify -e and don't specify CONFIG_PATH in
/etc/shorewall/shorewall.conf, the compiler sets CONFIG_PATH such that
it doesn't include /etc/shorewall. By adding '/etc/shorewall' to the
command line, you insert that directory at the front of CONFIG_PATH.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to