From: Peter Palfrader Date: Tue, 25 Aug 2015 08:42:55 +0000 (+0200) Subject: Remove /var/run/iptables-ferm.checksum /var/run/ip6tables-ferm.checksum in a pre... X-Git-Url: https://git.donarmstrong.com/?p=dsa-puppet.git;a=commitdiff_plain;h=41c7266839d7aedd30f32e0c576b8d507ba1eb59 Remove /var/run/iptables-ferm.checksum /var/run/ip6tables-ferm.checksum in a pre-hook --- diff --git a/modules/ferm/templates/ferm.conf.erb b/modules/ferm/templates/ferm.conf.erb index da573e56..5d63f8d0 100644 --- a/modules/ferm/templates/ferm.conf.erb +++ b/modules/ferm/templates/ferm.conf.erb @@ -83,6 +83,7 @@ domain (ip ip6) { } } +@hook pre "umask 0177; rm -f /var/run/iptables-ferm.checksum /var/run/ip6tables-ferm.checksum"; @hook post "umask 0177; iptables-save | sed -e 's/\[.*//' -e 's/^#.*//' | sha256sum > /var/run/iptables-ferm.checksum"; @hook post "umask 0177; ip6tables-save | sed -e 's/\[.*//' -e 's/^#.*//' | sha256sum > /var/run/ip6tables-ferm.checksum"; # vim:set et: