diff options
author | Micah Anderson <micah@riseup.net> | 2012-06-20 13:47:45 -0400 |
---|---|---|
committer | Micah Anderson <micah@riseup.net> | 2012-06-20 13:47:45 -0400 |
commit | f3448f4210260c1cfee72ae709a1ae0b8902d0d4 (patch) | |
tree | ea545e1ba4352be8b3a6b940d2e5be7a0a373ae9 /manifests/rules/torify/allow_tor_user.pp | |
parent | c3452c911c5dba8b53b558169774d83c3e1908e4 (diff) | |
download | puppet-shorewall-f3448f4210260c1cfee72ae709a1ae0b8902d0d4.tar.gz puppet-shorewall-f3448f4210260c1cfee72ae709a1ae0b8902d0d4.tar.bz2 |
Revert "Support exempting some users from torification measures."
This reverts commit 6cb88973f53aa7d92414797dd21952c1c1d5da98.
Diffstat (limited to 'manifests/rules/torify/allow_tor_user.pp')
-rw-r--r-- | manifests/rules/torify/allow_tor_user.pp | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/manifests/rules/torify/allow_tor_user.pp b/manifests/rules/torify/allow_tor_user.pp new file mode 100644 index 0000000..f44c1f0 --- /dev/null +++ b/manifests/rules/torify/allow_tor_user.pp @@ -0,0 +1,15 @@ +class shorewall::rules::torify::allow_tor_user { + + $whitelist_rule = "allow-from-tor-user" + if !defined(Shorewall::Rule["$whitelist_rule"]) { + shorewall::rule { + "$whitelist_rule": + source => '$FW', + destination => 'all', + user => $shorewall::tor_user, + order => 101, + action => 'ACCEPT'; + } + } + +} |