[Bug 247695] Is customizing /etc/rc.firewall risky?

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Thu Oct 29 02:36:33 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=247695

--- Comment #3 from Jason W. Bacon <jwb at freebsd.org> ---
Sorry, I didn't see Andriy's reply before.

Yes, I think advising users to modify a file that could be overwritten by
freebsd-update is a bug.  Most users would be extremely annoyed if they
customized /etc/rc.firewall only to have their changes clobbered by a routine
update.  Worse yet, they might not notice immediately that their firewall isn't
protecting the system as expected. I would update the rc.firewall script to
source a local customizations script that freebsd-update will never touch, and
update the handbook occordingly.

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-bugs mailing list