diff options
author | Micah Anderson <micah@riseup.net> | 2012-06-20 14:24:54 -0400 |
---|---|---|
committer | Micah Anderson <micah@riseup.net> | 2012-06-20 14:24:54 -0400 |
commit | 911cc18e594bb5a3ab642ebb24615a0447050c32 (patch) | |
tree | e292dfd5a636a930ac2eb5119d6db8618c8e74da /manifests/rules/torify/allow_tor_user.pp | |
parent | 30a604eced948f9cd8e663f129bd97ffdaf077aa (diff) | |
download | puppet-shorewall-911cc18e594bb5a3ab642ebb24615a0447050c32.tar.gz puppet-shorewall-911cc18e594bb5a3ab642ebb24615a0447050c32.tar.bz2 |
Revert "Support exempting some users from torification measures."
This reverts commit 6cb88973f53aa7d92414797dd21952c1c1d5da98.
Diffstat (limited to 'manifests/rules/torify/allow_tor_user.pp')
-rw-r--r-- | manifests/rules/torify/allow_tor_user.pp | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/manifests/rules/torify/allow_tor_user.pp b/manifests/rules/torify/allow_tor_user.pp new file mode 100644 index 0000000..f44c1f0 --- /dev/null +++ b/manifests/rules/torify/allow_tor_user.pp @@ -0,0 +1,15 @@ +class shorewall::rules::torify::allow_tor_user { + + $whitelist_rule = "allow-from-tor-user" + if !defined(Shorewall::Rule["$whitelist_rule"]) { + shorewall::rule { + "$whitelist_rule": + source => '$FW', + destination => 'all', + user => $shorewall::tor_user, + order => 101, + action => 'ACCEPT'; + } + } + +} |