aboutsummaryrefslogtreecommitdiff
path: root/manifests/rules/torify/allow_tor_user.pp
diff options
context:
space:
mode:
authorMicah Anderson <micah@riseup.net>2012-06-20 14:24:54 -0400
committerMicah Anderson <micah@riseup.net>2012-06-20 14:24:54 -0400
commit911cc18e594bb5a3ab642ebb24615a0447050c32 (patch)
treee292dfd5a636a930ac2eb5119d6db8618c8e74da /manifests/rules/torify/allow_tor_user.pp
parent30a604eced948f9cd8e663f129bd97ffdaf077aa (diff)
downloadpuppet-shorewall-911cc18e594bb5a3ab642ebb24615a0447050c32.tar.gz
puppet-shorewall-911cc18e594bb5a3ab642ebb24615a0447050c32.tar.bz2
Revert "Support exempting some users from torification measures."
This reverts commit 6cb88973f53aa7d92414797dd21952c1c1d5da98.
Diffstat (limited to 'manifests/rules/torify/allow_tor_user.pp')
-rw-r--r--manifests/rules/torify/allow_tor_user.pp15
1 files changed, 15 insertions, 0 deletions
diff --git a/manifests/rules/torify/allow_tor_user.pp b/manifests/rules/torify/allow_tor_user.pp
new file mode 100644
index 0000000..f44c1f0
--- /dev/null
+++ b/manifests/rules/torify/allow_tor_user.pp
@@ -0,0 +1,15 @@
+class shorewall::rules::torify::allow_tor_user {
+
+ $whitelist_rule = "allow-from-tor-user"
+ if !defined(Shorewall::Rule["$whitelist_rule"]) {
+ shorewall::rule {
+ "$whitelist_rule":
+ source => '$FW',
+ destination => 'all',
+ user => $shorewall::tor_user,
+ order => 101,
+ action => 'ACCEPT';
+ }
+ }
+
+}