Add UFW profile integration with OpenSSH

Bug #261884 reported by Didier Roche on 2008-08-27
4
Affects Status Importance Assigned to Milestone
openssh (Ubuntu)
Undecided
Jamie Strandboge

Bug Description

Ubuntu FireWall have now some features to integrate profiles from different application. Instead of knowing the ports on which xxx service is running, the administrator have different profiles and can create some rules on the profile instead of updating the targeted port.

For that, we need to add some files to /etc/ufw/applications.d/ and add automatically a rule to this profile regarding the ufw current policy.

Changed in openssh:
assignee: nobody → jdstrand
Didier Roche (didrocks) wrote :

  * add ufw integration (see
    https://wiki.ubuntu.com/UbuntuFirewall#Integrating%20UFW%20with%20Packages)
    (LP: #261884)
    - debian/control: suggest ufw for openssh-server
    - add openssh-server.ufw.profile with one profile and install it to
      /etc/ufw/applications.d/openssh-server
    - openssh-server.postinst: add OpenSSH rules as default
    - openssh-server.postrm: remove the profile on --purge

Changed in openssh:
status: New → Confirmed
Jamie Strandboge (jdstrand) wrote :

Updated to take advantage of ufw dpkg triggers. Also, the profile 'title' used the openssh-client text, not openssh-server so I fixed that too.

Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openssh - 1:5.1p1-1ubuntu2

---------------
openssh (1:5.1p1-1ubuntu2) intrepid; urgency=low

  * add ufw integration (see
    https://wiki.ubuntu.com/UbuntuFirewall#Integrating%20UFW%20with%20Packages)
    (LP: #261884)
    - debian/control: suggest ufw for openssh-server
    - add openssh-server.ufw.profile with one profile and install it to
      /etc/ufw/applications.d/openssh-server

 -- Didier Roche <email address hidden> Wed, 27 Aug 2008 18:00:07 +0200

Changed in openssh:
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers