Hi Thomas, No I'm not using an official debian package(I install the packages from tarball)!
- https://bugs.linuxfoundation.org/show_bug.cgi?id=718 - https://wiki.debian.org/ReleaseGoals/RunDirectory Very interesting links and I agree with you, Thomas, it would be nice if shorewall could respect the FHS requirements! For now I did what it is suggested on the shorewall.conf explanation page "SUBSYSLOCK=[pathname] This parameter should be set to the name of a file that the firewall should create if it starts successfully and remove when it stops. Creating and removing this file allows Shorewall to work with your distribution's initscripts. For RedHat and OpenSuSE, this should be set to /var/lock/subsys/shorewall. For Debian, the value is /var/lock/shorewall and in LEAF it is /var/run/shorwall." I did a couple of reboots/starts/restarts and no more complain of touch! MD On 20 Sep 2013 at 18:17, Thomas D. wrote: Date sent: Fri, 20 Sep 2013 18:17:43 +0200 From: "Thomas D." <whi...@whissi.de> To: shorewall-users@lists.sourceforge.net Subject: Re: [Shorewall-users] touch complain when shorewall start Send reply to: Shorewall Users <shorewall-users@lists.sourceforge.net> <mailto:shorewall-users-requ...@lists.sourceforge.net?subject=unsubscr ibe> <mailto:shorewall-users-requ...@lists.sourceforge.net?subject=subscrib e> > Hi, > > matt darfeuille wrote: > > Thus it would be nice if durring start shorewall > > could check if the directory subsys is present in /var/lock/, if > > not creat the directory subsys! > > Are you using an official Debian package? > > This gets complicated. On Gentoo we faced the same problem (google for > "SUBSYSLOCK AND shorewall", you will see that multiple distributions > have failed on that), that's why I added the following lines to the > installer: > > > # Adjust SUBSYSLOCK path (see > > # https://bugs.gentoo.org/show_bug.cgi?id=459316) > > perl -p -w -i -e "s|^SUBSYSLOCK=.*|SUBSYSLOCK=/run/lock/$PRODUCT|;" > > ${DESTDIR}${CONFDIR}/$PRODUCT/$PRODUCT.conf > > See > http://sourceforge.net/p/shorewall/code/ci/45242811630cac816dff70a65e7 > 9116cd4b28b37/ > > > @ Tom: > Shorewall's documentation says the package maintainer has to adjust > the SUBSYSLOCK value (so this is a Debian bug for me, like it was a > Ubuntu, ArchLinux and Gentoo bug: If they don't change the value, they > have to make sure it is valid), but Shorewall should provide > reasonable default values: Therefor Shorewall should follow latest FHS > standards and migrate from /var/run to /run. > > See also: > - https://bugs.linuxfoundation.org/show_bug.cgi?id=718 > - https://wiki.debian.org/ReleaseGoals/RunDirectory > > (and I never understood why it uses a subfolder called "subsys", too) > > > BUT: > Because Shorewall supports a "dynamic" SUBSYSLOCK value (can be > changed by user in shorewall.conf) I think that Shorewall should be > able to handle that, which - as shown by Matt - Shorewall doesn't do > at the moment. So finally I would agree, that Shorewall should be able > (or at least should try) to create that folder (or check for it, show > an error and tell the user to do). > > > -Thomas > > > ---------------------------------------------------------------------- > -------- LIMITED TIME SALE - Full Year of Microsoft Training For Just > $49.99! 1,500+ hours of tutorials including VisualStudio 2012, Windows > 8, SharePoint 2013, SQL 2012, MVC 4, more. BEST VALUE: New > Multi-Library Power Pack includes Mobile, Cloud, Java, and UX Design. > Lowest price ever! Ends 9/20/13. > http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.c > lktrk _______________________________________________ Shorewall-users > mailing list Shorewall-users@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/shorewall-users ------------------------------------------------------------------------------ LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99! 1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint 2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13. http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
