On 3/22/2015 9:07 AM, Tom Eastep wrote: > On 3/22/2015 8:47 AM, [email protected] wrote:
>> Sure, I get that my opinion may be different that others'. For me, >> there's NO advantage to having shorewall installed "into" each >> system, spread out across all its distro-specific directories and >> locations. In my case of many installs/distros, it's a nightmare >> to manage. It can be perfectly functional -- and easier to manage >> -- completely isolated to a "/opt/shorewall" or >> "/usr/local/shorewall", with me 'just having to then manually >> install systemd service files and change a bin/path or add a couple >> of links. >> >> My goal is "distribution AGNOSTIC" -- one single-version, generic >> install into a directory, without any automatied/automating >> assumptions, that *I* can then modify, per detected/target >> distro,when I modify/push multiple, different-distro shorewall >> configs. Actually, no assimptions of any kind. Just "put it" >> where my shorewallrc tells it to. This would be very useful. >> There are more distros, and distro-layouts, than just those >> currently handled by SW's "cases" -- including LFS, and 'personal >> preference'. I'm not suggesting cobbling up a super-intelligent >> change to code -- instead, just adding one completely dumbed-down >> option. No automated installations, checks, startup enables, etc. >> Just install the files into the dirs & filenams I spec in my >> shorewallrc.generic and leave the rest to me. >> >> Bottom line "wish"? If rcfile == "shorewallrc.generic", then >> do/check nothing other than install into rc-specified locations. >> > > But you want the configuration to be runnable from that location? > There is an undocumented SANDBOX option that you can set in shorewallrc; just make it non-empty. It should do pretty much what you want. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Dive into the World of Parallel Programming The Go Parallel Website, sponsored by Intel and developed in partnership with Slashdot Media, is your hub for all things parallel software development, from weekly thought leadership blogs to news, videos, case studies, tutorials and more. Take a look and join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
