[gentoo-dev] iptables directory

[gentoo-dev] iptables directory

[Vitaly Kushneriuk]

Hi.
As iptables can be called from /etc/init.d/ scripts and is essential for
system startup, it should go to /sbin and not to /usr/sbin

TIA

AW: [gentoo-dev] iptables directory

[Sebastian Werner]

There are many tools i like to see in /sbin:

For example: grep, sed, cut, cat, ...

Sebastian Werner



-----Ursprüngliche Nachricht-----
Von: gentoo-dev-admin@gentoo.org [mailto:gentoo-dev-admin@gentoo.org] Im
Auftrag von Vitaly Kushneriuk
Gesendet: Donnerstag, 20. Dezember 2001 14:03
An: Gentoo-dev
Betreff: [gentoo-dev] iptables directory

Hi.
As iptables can be called from /etc/init.d/ scripts and is essential for
system startup, it should go to /sbin and not to /usr/sbin

TIA

_______________________________________________
gentoo-dev mailing list
gentoo-dev@gentoo.org
http://lists.gentoo.org/mailman/listinfo/gentoo-dev

Re: [gentoo-dev] iptables directory

[Juergen Ilse]

Hello,

On Thu, Dec 20, 2001 at 02:31:43PM +0100, Sebastian Werner wrote:
> There are many tools i like to see in /sbin:
> 
> For example: grep, sed, cut, cat, ...
> 
 
Why? I don't see any really good reason for this.
But i see a reason for placing "sleep" in /bin instead of /usr/bin:
The shutdown-script seems to call the programm "sleep", and this is called
after unmounting all Filesystems except the root-FS. If you place /usr on
a separate Filesystem (as i have done), you have a problem ...

ciao,
	Juergen Ilse					(ilse@asys-h.de)
-- 
Wenn ich auch nur aus jedem 1000. Bug in einem M$ Produkt|Juergen Ilse
einen Tag trauern wollte, also da muesste ich 300 Jahre  |Internet POP Hannover
alt werden und wuerde mehrere Dutzend schwarze Anzuege   |Vahrenwalder Str. 205
aufbrauchen. (Detlef Bosau in dcoulm)                    |30165 Hannover

Re: [gentoo-dev] iptables directory

[Vitaly Kushneriuk]

On Thu, 2001-12-20 at 15:38, Juergen Ilse wrote:
> 
> Hello,
> 
> On Thu, Dec 20, 2001 at 02:31:43PM +0100, Sebastian Werner wrote:
> > There are many tools i like to see in /sbin:
> > 
> > For example: grep, sed, cut, cat, ...
> > 
>  
> Why? I don't see any really good reason for this.
/usr partition can be, for example, nfs - mounted,
and when you have nfs up and running, it may be too late to set up
firewall :-)
> But i see a reason for placing "sleep" in /bin instead of /usr/bin:
> The shutdown-script seems to call the programm "sleep", and this is called
> after unmounting all Filesystems except the root-FS. If you place /usr on
> a separate Filesystem (as i have done), you have a problem ...
> 
> ciao,
> 	Juergen Ilse					(ilse@asys-h.de)
> -- 
> Wenn ich auch nur aus jedem 1000. Bug in einem M$ Produkt|Juergen Ilse
> einen Tag trauern wollte, also da muesste ich 300 Jahre  |Internet POP Hannover
> alt werden und wuerde mehrere Dutzend schwarze Anzuege   |Vahrenwalder Str. 205
> aufbrauchen. (Detlef Bosau in dcoulm)                    |30165 Hannover
> _______________________________________________
> gentoo-dev mailing list
> gentoo-dev@gentoo.org
> http://lists.gentoo.org/mailman/listinfo/gentoo-dev

Re: [gentoo-dev] iptables directory

[Daniel Robbins]

On Thu, Dec 20, 2001 at 03:03:02PM +0200, Vitaly Kushneriuk wrote:
> Hi.
> As iptables can be called from /etc/init.d/ scripts and is essential for
> system startup, it should go to /sbin and not to /usr/sbin

OK; I just fixed this in iptables-1.2.4-r1.  It should be showing up on
rsync soon.

-- 
Daniel Robbins                                  <drobbins@gentoo.org>
Chief Architect/President                       http://www.gentoo.org 
Gentoo Technologies, Inc.

Re: [gentoo-dev] iptables directory

[Daniel Robbins]

On Thu, Dec 20, 2001 at 02:38:35PM +0100, Juergen Ilse wrote:
> > For example: grep, sed, cut, cat, ...
> > 
>  
> Why? I don't see any really good reason for this.
> But i see a reason for placing "sleep" in /bin instead of /usr/bin:
> The shutdown-script seems to call the programm "sleep", and this is called
> after unmounting all Filesystems except the root-FS. If you place /usr on
> a separate Filesystem (as i have done), you have a problem ...

With the new initscripts, sleep is no longer called after filesystem unmount.
We do have a sleep in runscript.sh that can probably be removed.

Best Regards,

-- 
Daniel Robbins                                  <drobbins@gentoo.org>
Chief Architect/President                       http://www.gentoo.org 
Gentoo Technologies, Inc.

Re: [gentoo-dev] iptables directory

[Bruce A. Locke]

On Sat, 2001-12-22 at 10:56, Daniel Robbins wrote:
> On Thu, Dec 20, 2001 at 03:03:02PM +0200, Vitaly Kushneriuk wrote:
> > Hi.
> > As iptables can be called from /etc/init.d/ scripts and is essential for
> > system startup, it should go to /sbin and not to /usr/sbin
> 
> OK; I just fixed this in iptables-1.2.4-r1.  It should be showing up on
> rsync soon.

It appears broke on my system.  I unmerged all previous versions of
iptables and merged the most current and now I get fun stuff like this:

--- snip ---
iptables v1.2.4: Couldn't load target
`standard':/usr/lib/iptables/libipt_standard.so: cannot open shared
object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

iptables v1.2.4: Couldn't load target
`MASQUERADE':/usr/lib/iptables/libipt_MASQUERADE.so: cannot open shared
object file: No such file or directory

Try `iptables -h' or 'iptables --help' for more information.
--- snip ---

Creating a symlink from /usr/lib/iptables to /lib/iptables makes it work
again but obviously its not the correct solution... is /usr/lib
hardcoded into iptables?  the ebuild seems fine, etc.

 
-- 

Bruce A. Locke
blocke@shivan.org

"Those that would give up a necessary freedom for temporary 
  safety deserve neither freedom nor safety."
   -- Ben Franklin

Re: [gentoo-dev] iptables directory

[Martin Schlemmer]

[-- Attachment #1: Type: text/plain, Size: 492 bytes --]

On Sun, 2001-12-23 at 12:51, Bruce A. Locke wrote:

> Creating a symlink from /usr/lib/iptables to /lib/iptables makes it work
> again but obviously its not the correct solution... is /usr/lib
> hardcoded into iptables?  the ebuild seems fine, etc.

Hi

Yep, it is 'sord of' hardcoded.  I fixed it and it should be
available to non developers in about 20 minutes.


Greetings,

-- 

Martin Schlemmer
Gentoo Linux Developer, Desktop Team Developer
Cape Town, South Africa


[-- Attachment #2: Type: application/pgp-signature, Size: 232 bytes --]