On 11/29/2012 02:02 PM, Steven Jan Springl wrote:

In the attached config., when the rules file contains:

okay  all  all  tcp  1

and action.okay contains

ACCEPT  {switch=$0=1}

the following messages are produced:

/var/lib/shorewall/.start: 1: cannot create /proc/net/nf_condition/brd22p8:
Directory nonexistent


Good catch, Steven.

Patch attached.

Thanks,
-Tom
--
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm
index 98233ec..ab999bd 100644
--- a/Shorewall/Perl/Shorewall/Chains.pm
+++ b/Shorewall/Perl/Shorewall/Chains.pm
@@ -7491,7 +7491,7 @@ sub initialize_switches() {
 	    emit( '        if [ $COMMAND = start ]; then' );
 	    push_indent;
 	    while ( my ( $switch, $setting ) = each %switches ) {
-		emit "        echo $setting->{setting} > /proc/net/nf_condition/$switch";
+		emit "        [ -f /proc/net/nf_condition/$switch ] && echo $setting->{setting} > /proc/net/nf_condition/$switch";
 	    }
 	    pop_indent;
 	    emit "        fi\n";
------------------------------------------------------------------------------
Keep yourself connected to Go Parallel: 
VERIFY Test and improve your parallel project with help from experts 
and peers. http://goparallel.sourceforge.net
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to