ufw

Comment 7 for bug 916961

Revision history for this message
Jamie Strandboge (jdstrand) wrote :

I thought about this a little more. If someone was interested in submitting a patch, I think the way to do it for the export would be to iterate through UFWBackend::files and create a tar archive. The import would similarly iterate through UFWBackend::files and then run reload. If the tar archive contains anything that the import is not expecting, it should fail. This will provide the necessary security as well as ensure that an import can only come from a similar ufw. We may want to add a compatibility file in the tar archive, but this probably isn't needed initially.