SRU Request
Impact: rules are added when explicitly not intended to be. Requires reloading the firewall to flush the mistakenly added rule out
Bug is trivially fixed by checking for the dryrun status before operating on the chains.
TEST CASE: 1. Enable the firewall: $ sudo ufw enable
2. Check status of firewall (should have no rules): $ sudo ufw status Firewall loaded
3. Perform a dry-run: $ sudo ufw --dry-run allow http ... Rule added
4. Check status of firewall (should have no rules, but does in 0.16.2.1): $ sudo ufw status Firewall loaded
To Action From -- ------ ---- 80:tcp ALLOW Anywhere
After the applying the debdiff (package in -proposed), step '4' shows no rules were added.
Regression potential: it is believed there is no regression potential
SRU Request
Impact: rules are added when explicitly not intended to be. Requires reloading the firewall to flush the mistakenly added rule out
Bug is trivially fixed by checking for the dryrun status before operating on the chains.
TEST CASE:
1. Enable the firewall:
$ sudo ufw enable
2. Check status of firewall (should have no rules):
$ sudo ufw status
Firewall loaded
3. Perform a dry-run:
$ sudo ufw --dry-run allow http
...
Rule added
4. Check status of firewall (should have no rules, but does in 0.16.2.1):
$ sudo ufw status
Firewall loaded
To Action From
-- ------ ----
80:tcp ALLOW Anywhere
After the applying the debdiff (package in -proposed), step '4' shows no rules were added.
Regression potential: it is believed there is no regression potential