diff options
author | Jan Wagner <mail@jwagner.eu> | 2016-04-19 15:10:50 +0200 |
---|---|---|
committer | Jan Wagner <mail@jwagner.eu> | 2016-04-19 15:10:50 +0200 |
commit | d0f91512d9ca6d361d8a4a387094c48aab00e111 (patch) | |
tree | b00ed220e2fa04bdb1db43475a8149d01d1be5db /bootstrap.d/21-firewall.sh | |
parent | 7878e85af7748d531a64f459723dca76ee37914b (diff) | |
download | rpi2-gen-image-d0f91512d9ca6d361d8a4a387094c48aab00e111.tar.gz rpi2-gen-image-d0f91512d9ca6d361d8a4a387094c48aab00e111.tar.bz2 rpi2-gen-image-d0f91512d9ca6d361d8a4a387094c48aab00e111.zip |
Diffstat (limited to 'bootstrap.d/21-firewall.sh')
-rw-r--r-- | bootstrap.d/21-firewall.sh | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/bootstrap.d/21-firewall.sh b/bootstrap.d/21-firewall.sh index 247325e..7583d04 100644 --- a/bootstrap.d/21-firewall.sh +++ b/bootstrap.d/21-firewall.sh @@ -7,16 +7,16 @@ if [ "$ENABLE_IPTABLES" = true ] ; then # Create iptables configuration directory - mkdir -p "$R/etc/iptables" + mkdir -p "${ETCDIR}/iptables" # Install iptables systemd service - install_readonly files/iptables/iptables.service "$R/etc/systemd/system/iptables.service" + install_readonly files/iptables/iptables.service "${ETCDIR}/systemd/system/iptables.service" # Install flush-table script called by iptables service - install_exec files/iptables/flush-iptables.sh "$R/etc/iptables/flush-iptables.sh" + install_exec files/iptables/flush-iptables.sh "${ETCDIR}/iptables/flush-iptables.sh" # Install iptables rule file - install_readonly files/iptables/iptables.rules "$R/etc/iptables/iptables.rules" + install_readonly files/iptables/iptables.rules "${ETCDIR}/iptables/iptables.rules" # Reload systemd configuration and enable iptables service chroot_exec systemctl daemon-reload @@ -24,12 +24,12 @@ if [ "$ENABLE_IPTABLES" = true ] ; then if [ "$ENABLE_IPV6" = true ] ; then # Install ip6tables systemd service - install_readonly files/iptables/ip6tables.service "$R/etc/systemd/system/ip6tables.service" + install_readonly files/iptables/ip6tables.service "${ETCDIR}/systemd/system/ip6tables.service" # Install ip6tables file - install_exec files/iptables/flush-ip6tables.sh "$R/etc/iptables/flush-ip6tables.sh" + install_exec files/iptables/flush-ip6tables.sh "${ETCDIR}/iptables/flush-ip6tables.sh" - install_readonly files/iptables/ip6tables.rules "$R/etc/iptables/ip6tables.rules" + install_readonly files/iptables/ip6tables.rules "${ETCDIR}/iptables/ip6tables.rules" # Reload systemd configuration and enable iptables service chroot_exec systemctl daemon-reload @@ -39,6 +39,6 @@ fi if [ "$ENABLE_SSHD" = false ] ; then # Remove SSHD related iptables rules - sed -i "/^#/! {/SSH/ s/^/# /}" "$R/etc/iptables/iptables.rules" 2> /dev/null - sed -i "/^#/! {/SSH/ s/^/# /}" "$R/etc/iptables/ip6tables.rules" 2> /dev/null + sed -i "/^#/! {/SSH/ s/^/# /}" "${ETCDIR}/iptables/iptables.rules" 2> /dev/null + sed -i "/^#/! {/SSH/ s/^/# /}" "${ETCDIR}/iptables/ip6tables.rules" 2> /dev/null fi |