Comment 1 for bug 247352

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

SRU Request

Impact: rules are added when explicitly not intended to be. Requires reloading the firewall to flush the mistakenly added rule out

Bug is trivially fixed by checking for the dryrun status before operating on the chains.

TEST CASE:
1. Enable the firewall:
$ sudo ufw enable

2. Check status of firewall (should have no rules):
$ sudo ufw status
Firewall loaded

3. Perform a dry-run:
$ sudo ufw --dry-run allow http
...
Rule added

4. Check status of firewall (should have no rules, but does in 0.16.2.1):
$ sudo ufw status
Firewall loaded

To Action From
-- ------ ----
80:tcp ALLOW Anywhere

After the applying the debdiff (package in -proposed), step '4' shows no rules were added.

Regression potential: it is believed there is no regression potential