ufw manpage bug (some usage missing), suggested improvements to -help
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
ufw (Ubuntu) |
Fix Released
|
Low
|
Unassigned |
Bug Description
the ufw manpage USAGE summary (top of manpage) does not list the syntax for adding app profiles to your firewall.
USAGE
ufw [--dry-run] enable|
ufw [--dry-run] default allow|deny|reject [incoming|outgoing]
ufw [--dry-run] logging on|off|LEVEL
ufw [--dry-run] reset
ufw [--dry-run] status [verbose|numbered]
ufw [--dry-run] show REPORT
ufw [--dry-run] [delete] [insert NUM] allow|deny|
ufw [--dry-run] [delete] [insert NUM] allow|deny|
ADDRESS [port PORT]]
ufw [--dry-run] delete NUM
ufw [--dry-run] app list|info|
I'd suggest something like:
ufw [--dry-run] [delete] [insert NUM] allow|deny|
...assuming that all the potential arguments are valid when you use an application profile name.
Additionally, the ufw --help text doesn't really explain this either.
----
# ufw help
Usage: ufw COMMAND
Commands:
enable enables the firewall
disable disables the firewall
default ARG set default policy
logging LEVEL set logging to LEVEL
allow ARGS add allow rule
deny ARGS add deny rule
reject ARGS add reject rule
limit ARGS add limit rule
delete RULE|NUM delete RULE
insert NUM RULE insert RULE at NUM
reset reset firewall
status show firewall status
status numbered show firewall status as numbered list of RULES
status verbose show verbose firewall status
show ARG show firewall report
version display version information
Application profile commands:
app list list application profiles
app info PROFILE show information on PROFILE
app update PROFILE update PROFILE
app default ARG set default application policy
----
I'd suggest changing:
allow ARGS|AppProfile add allow rule or enable an application profile
...and presumably something similar for "deny." You might alternately put something like this in the Application Profile commands section:
Application profile commands:
app list list application profiles
app info PROFILE show information on PROFILE
app update PROFILE update PROFILE
app default ARG set default application policy
allow PROFILE add allow rules defined in PROFILE
thanks!
Related branches
Changed in ufw (Ubuntu): | |
status: | Confirmed → In Progress |
importance: | Undecided → Low |
Hmm, while you are looking at the man page, perhaps add a FILES section at the end.
FILES
/etc/ufw/* ufw/application s.d/*
/etc/
/lib/ufw/*
putting the config files in /lib is arguably a bug, too, but I won't debate that here.
regards
danno