Handle missing TCP_FLAGS_DISPOSITION setting

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-07-28 15:56:34 -07:00
parent 6c025d20c9
commit d9fe6e7a42

View File

@ -3705,7 +3705,7 @@ sub get_configuration( $$$ ) {
if ( $val = $config{TCP_FLAGS_DISPOSITION} ) {
fatal_error "Invalid value ($config{TCP_FLAGS_DISPOSITION}) for TCP_FLAGS_DISPOSITION" unless $val =~ /^(?:(?:A_)?(?:REJECT|DROP)|ACCEPT)$/;
} else {
$config{TCP_FLAGS_DISPOSITION} = 'DROP';
$val = $config{TCP_FLAGS_DISPOSITION} = 'DROP';
}
require_capability 'AUDIT_TARGET' , "TCP_FLAGS_DISPOSITION=$val", 's' if $val =~ /^A_/;