Hi Thomas,
No I''m not using an official debian package(I install the packages
from tarball)!
- https://bugs.linuxfoundation.org/show_bug.cgi?id=718
- https://wiki.debian.org/ReleaseGoals/RunDirectory
Very interesting links and I agree with you, Thomas, it would be nice
if shorewall could respect the FHS requirements!
For now I did what it is suggested on the shorewall.conf explanation
page
"SUBSYSLOCK=[pathname]
This parameter should be set to the name of a file that the firewall
should create if it starts successfully and remove when it stops.
Creating and removing this file allows Shorewall to work with your
distribution''s initscripts. For RedHat and OpenSuSE, this should be
set to /var/lock/subsys/shorewall. For Debian, the value is
/var/lock/shorewall and in LEAF it is /var/run/shorwall."
I did a couple of reboots/starts/restarts and no more complain of
touch!
MD
On 20 Sep 2013 at 18:17, Thomas D. wrote:
Date sent: Fri, 20 Sep 2013 18:17:43 +0200
From: "Thomas D." <whissi@whissi.de>
To: shorewall-users@lists.sourceforge.net
Subject: Re: [Shorewall-users] touch complain when shorewall
start
Send reply to: Shorewall Users
<shorewall-users@lists.sourceforge.net>
<mailto:shorewall-users-request@lists.sourceforge.net?subject=unsubscr
ibe>
<mailto:shorewall-users-request@lists.sourceforge.net?subject=subscrib
e>
> Hi,
>
> matt darfeuille wrote:
> > Thus it would be nice if durring start shorewall
> > could check if the directory subsys is present in /var/lock/, if
> > not creat the directory subsys!
>
> Are you using an official Debian package?
>
> This gets complicated. On Gentoo we faced the same problem (google for
> "SUBSYSLOCK AND shorewall", you will see that multiple
distributions
> have failed on that), that''s why I added the following lines to
the
> installer:
>
> > # Adjust SUBSYSLOCK path (see
> > # https://bugs.gentoo.org/show_bug.cgi?id=459316)
> > perl -p -w -i -e
"s|^SUBSYSLOCK=.*|SUBSYSLOCK=/run/lock/$PRODUCT|;"
> > ${DESTDIR}${CONFDIR}/$PRODUCT/$PRODUCT.conf
>
> See
> http://sourceforge.net/p/shorewall/code/ci/45242811630cac816dff70a65e7
> 9116cd4b28b37/
>
>
> @ Tom:
> Shorewall''s documentation says the package maintainer has to
adjust
> the SUBSYSLOCK value (so this is a Debian bug for me, like it was a
> Ubuntu, ArchLinux and Gentoo bug: If they don''t change the value,
they
> have to make sure it is valid), but Shorewall should provide
> reasonable default values: Therefor Shorewall should follow latest FHS
> standards and migrate from /var/run to /run.
>
> See also:
> - https://bugs.linuxfoundation.org/show_bug.cgi?id=718
> - https://wiki.debian.org/ReleaseGoals/RunDirectory
>
> (and I never understood why it uses a subfolder called "subsys",
too)
>
>
> BUT:
> Because Shorewall supports a "dynamic" SUBSYSLOCK value (can be
> changed by user in shorewall.conf) I think that Shorewall should be
> able to handle that, which - as shown by Matt - Shorewall doesn''t
do
> at the moment. So finally I would agree, that Shorewall should be able
> (or at least should try) to create that folder (or check for it, show
> an error and tell the user to do).
>
>
> -Thomas
>
>
> ----------------------------------------------------------------------
> -------- LIMITED TIME SALE - Full Year of Microsoft Training For Just
> $49.99! 1,500+ hours of tutorials including VisualStudio 2012, Windows
> 8, SharePoint 2013, SQL 2012, MVC 4, more. BEST VALUE: New
> Multi-Library Power Pack includes Mobile, Cloud, Java, and UX Design.
> Lowest price ever! Ends 9/20/13.
> http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.c
> lktrk _______________________________________________ Shorewall-users
> mailing list Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
------------------------------------------------------------------------------
LIMITED TIME SALE - Full Year of Microsoft Training For Just $49.99!
1,500+ hours of tutorials including VisualStudio 2012, Windows 8, SharePoint
2013, SQL 2012, MVC 4, more. BEST VALUE: New Multi-Library Power Pack includes
Mobile, Cloud, Java, and UX Design. Lowest price ever! Ends 9/20/13.
http://pubads.g.doubleclick.net/gampad/clk?id=58041151&iu=/4140/ostg.clktrk