Brian J. Murrell wrote:
> On Sun, 2007-15-04 at 12:47 -0700, Tom Eastep wrote:
>> Brian J. Murrell wrote:
>>
>>> Are you using OpenWRT there synonymously with embedded systems or
>>> specifically for OpenWRT?
>>>
>> Specifically for OpenWRT. The LEAF Bering uClibc distribution (which is
>> the other embedded distro that embraces Shorewall) has a persistent
>> /var. But they implement persistence in a clever way so that the CF only
>> gets written when the user elects to 'backup' a package that has /var
>> content.
> 
> I take it you are pretty much of the same mind about the
> 
>     local lockf=/var/lock/shorewall
> 
> using /var/lock for all lite boxes rather than a per-lite configuration?
>
> That one is hard-coded in /usr/share/shorewall/functions on the
> administrative machine unfortunately so there is not much the OpenWRT
> packaging can do to fix this, if I'm reading the debug output and source
> code correctly.

The only 'local lockf' in the code reads:

        local lockf=${VARDIR}/lock

> 
> I suppose another similar shorewall-lite hack to create /var/lock

There is no /var/lock hardcoded anywhere.

There is this entry in /etc/shorewall/shorewall.conf:

        SUBSYSLOCK=/var/lock/subsys/shorewall

But clearly, you can change that any way that you want. There are two
different locks:

        ${VARDIR}/lock - used to ensure that two shorewall operations   
                         aren't going on at the same time.

        SUBSYSLOCK     - Used by the init scripts to indicate that
                         the subsystem is supposed to be active. Not all        
                 distributions
support this so it is options.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to