summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBart De Schuymer <bdschuym@pandora.be>2005-11-12 22:22:39 +0000
committerBart De Schuymer <bdschuym@pandora.be>2005-11-12 22:22:39 +0000
commitb71fa22ea8a8e687bd4348cfb34b2e593417a171 (patch)
tree464e64db3b100ab3d18d45b8d00b6f1e1da5e031
parent1519ef4a2d22e35f8cb76e8a38af057412b45ffd (diff)
save previous ruleset to .save
-rw-r--r--userspace/ebtables2/ebtables.sysv15
1 files changed, 13 insertions, 2 deletions
diff --git a/userspace/ebtables2/ebtables.sysv b/userspace/ebtables2/ebtables.sysv
index d9c4082..5d1b612 100644
--- a/userspace/ebtables2/ebtables.sysv
+++ b/userspace/ebtables2/ebtables.sysv
@@ -25,6 +25,7 @@ source /etc/sysconfig/network
RETVAL=0
prog="ebtables"
desc="Ethernet bridge filtering"
+umask 0077
#default configuration
EBTABLES_TEXT_FORMAT="yes"
@@ -85,10 +86,20 @@ restart() {
save() {
echo -n $"Saving $desc ($prog): "
if [ "$EBTABLES_TEXT_FORMAT" = "yes" ]; then
- __EXEC_PATH__/ebtables-save > /etc/sysconfig/ebtables || RETVAL=1
+ if [ -e __SYSCONFIG__/ebtables ]; then
+ chmod 0600 __SYSCONFIG__/ebtables
+ mv -f __SYSCONFIG__/ebtables __SYSCONFIG__/ebtables.save
+ fi
+ __EXEC_PATH__/ebtables-save > __SYSCONFIG__/ebtables || RETVAL=1
fi
if [ "$EBTABLES_BINARY_FORMAT" = "yes" ]; then
- rm __SYSCONFIG__/ebtables.*
+ rm -f __SYSCONFIG__/ebtables.*.save
+ for oldtable in $(ls __SYSCONFIG__/ebtables.*); do
+ if [ "$oldtable" != __SYSCONFIG__/ebtables.save ]; then
+ chmod 0600 $oldtable
+ mv -f $oldtable $oldtable.save
+ fi
+ done
for table in $(grep -E '^ebtable_' /proc/modules | cut -f1 -d' ' | sed s/ebtable_//); do
__EXEC_PATH__/ebtables -t $table --atomic-file __SYSCONFIG__/ebtables.$table --atomic-save || RETVAL=1
if [ "$EBTABLES_SAVE_COUNTER" = "no" ]; then