Hi,

matt darfeuille wrote:
> Thus it would be nice if durring start shorewall 
> could check if the directory subsys is present in /var/lock/, if  not 
> creat the directory subsys!

Are you using an official Debian package?

This gets complicated. On Gentoo we faced the same problem (google for
"SUBSYSLOCK AND shorewall", you will see that multiple distributions
have failed on that), that's why I added the following lines to the
installer:

> # Adjust SUBSYSLOCK path (see https://bugs.gentoo.org/show_bug.cgi?id=459316)
> perl -p -w -i -e "s|^SUBSYSLOCK=.*|SUBSYSLOCK=/run/lock/$PRODUCT|;" 
> ${DESTDIR}${CONFDIR}/$PRODUCT/$PRODUCT.conf

See
http://sourceforge.net/p/shorewall/code/ci/45242811630cac816dff70a65e79116cd4b28b37/


@ Tom:
Shorewall's documentation says the package maintainer has to adjust the
SUBSYSLOCK value (so this is a Debian bug for me, like it was a Ubuntu,
ArchLinux and Gentoo bug: If they don't change the value, they have to
make sure it is valid), but Shorewall should provide reasonable default
values: Therefor Shorewall should follow latest FHS standards and
migrate from /var/run to /run.

See also:
- https://bugs.linuxfoundation.org/show_bug.cgi?id=718
- https://wiki.debian.org/ReleaseGoals/RunDirectory

(and I never understood why it uses a subfolder called "subsys", too)


BUT:
Because Shorewall supports a "dynamic" SUBSYSLOCK value (can be changed
by user in shorewall.conf) I think that Shorewall should be able to
handle that, which - as shown by Matt - Shorewall doesn't do at the
moment. So finally I would agree, that Shorewall should be able (or at
least should try) to create that folder (or check for it, show an error
and tell the user to do).


-Thomas


------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. 
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to