ufw

Comment 18 for bug 728128

Revision history for this message
Kevin Lyda (lyda) wrote : Re: ufw user.rules should be stored in /etc to allow tracking by package 'etckeeper'

Sorry, I'm another vote for the config info moving to /etc. Putting it in /lib makes my life more difficult in tracking config changes.

The argument that it is state information really does not hold water for the following two reasons. First, state info belongs in /var, not /lib. So if you're not going to put it in /var, put it in /etc. Second, it's not state info. It's configuration. If I enable ufw and then run a new ufw allow/deny command the rules files will be updates but the running state will not be changed (and worse still, ufw status won't show that but that's a different bug). The rules files capture the configuration ufw will use the next time it is enabled or reloaded - they do not capture state.

It might be nice if ufw did capture state - it might then be able to provide diffs between its on-disk configuration (in /etc) and its current running state (in /var or in /run). But the files in /lib are not capturing state.

This bug should be reopened and this bug should be fixed.