Brian J. Murrell wrote:
> On Sun, 2007-15-04 at 10:57 -0400, Brian J. Murrell wrote:
>> Ah ha!  Yes.  On my shorewall (proper) system, $VARDIR is indeed
>> still /var/lib/shorewall.  This seems like it needs to be another
>> per-lite configurable variable.  I will hunt for how to do that.
> 
> Just to update... if I change compiler as such:
> 
> --- /usr/share/shorewall/compiler.dist  2007-04-15 14:06:49.000000000 -0400
> +++ /usr/share/shorewall/compiler       2007-04-15 14:08:03.000000000 -0400
> @@ -7928,7 +7928,8 @@
>         cat >&3 << __EOF__
>  SHAREDIR=/usr/share/shorewall-lite
>  CONFDIR=/etc/shorewall-lite
> -VARDIR=/var/lib/shorewall-lite
> +#VARDIR=/var/lib/shorewall-lite
> +VARDIR=/etc/shorewall-lite
>  
>  __EOF__
>         cat >&3 ${SHAREDIR}/functions
> 
> I get my desired behaviour.  I don't see anything between 3.2.6 and
> 3.2.10 that effects this kind of change.
> 
> It really does seem that $VARDIR needs to be per-lite configurable as
> well.
> 
> Thots?

No (both to your patch and to a per-lite VARDIR). I think that the
OpenVPN /sbin/shorewall-lite should ensure that /var/lib/shorewall-lite
points to the correct directory (wherever you set LITEDIR). That's a
simple patch to one component (shorewall-lite) in the OpenWRT package.

if [ ! -d $VARDIR ]; then
    [ -d /var/lib ] || mkdir /var/lib
    ln -s $LITEDIR $VARDIR
fi

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to