affects lucid
thanks
>From #ubuntu-server:
13:54 <twb> So guess what I just discovered
13:54 <twb> Purging ufw from lucid causes it to disable the firewall -- EVEN IF
ufw wasn't involved in firewalling
13:55 <twb> This is especially great when I happen to be removing ufw from a
chroot, on a production server running AT A PRISON
13:56 <jmarsden> Grin! This is why we should do our learning and trying out
new things on a test machine in a safe and controlled environment... I don't
think a live production server in a prison counts as a "safe and controlled
environment" :)
13:57 <fluvvell> jmarsden, thanks - reading it now - urr once samba.org wakes
up!
13:57 <twb> jmarsden: well, yes, we did test things
13:57 <jmarsden> fluvvell: You're welcome
13:57 <twb> jmarsden: but you tend not to notice when the firewall falls into
"allow all" mode on the test box, or you just assume it was one of the other
idiot devs that did it
14:06 <fluvvell> urk, ufw is installed by default! I never noticed that when I
installed shorewall
14:12 <twb> fluvvell: it's installed but not enabled
14:12 <twb> fluvvell: BUT, purging it doesn't check whether it's enabled first
14:13 <twb> IMO its postrm should say "am I enabled? If not, leave the
firewall the hell alone"
00:21 <jdstrand> twb: re ufw purge-- this is bug #581744, fixed in maverick.
would you mind adding a comment to that bug, saying it affects you on lucid,
and I can do an SRU
This is with a 8.04 server as the host OS and a 10.04 chroot
(generated by extracting the filesystem.squashfs from the 10.04.3
desktop live/install CD).
You can *probably* reproduce this by simply debootstraping a lucid
chroot, chroot it apt-get install ufw, chroot it apt-get purge ufw.
** Also affects: lucid
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/581744
Title:
Purging should not set reset policies/chains if ufw wasn't enabled
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
