diff --git a/Shorewall2/changelog.txt b/Shorewall2/changelog.txt
index 1f401bcfa..56d978dbf 100644
--- a/Shorewall2/changelog.txt
+++ b/Shorewall2/changelog.txt
@@ -13,3 +13,5 @@ Changes since 2.0.1
 6) Restore logic to make 'find_file' check for SHOREWALL_DIR separately.
 
 7) Allow CONFIG_PATH to be inherited.
+
+8) Fix ensure_config_path call.
diff --git a/Shorewall2/firewall b/Shorewall2/firewall
index fd323736b..ab3e364b8 100755
--- a/Shorewall2/firewall
+++ b/Shorewall2/firewall
@@ -5711,8 +5711,6 @@ do_initialize() {
     BRIDGING=
     DYNAMIC_ZONES=
 
-    ensure_config_path
-
     stopping=
     have_mutex=
     masq_seq=1
@@ -5735,6 +5733,8 @@ do_initialize() {
 	startup_error "$FUNCTIONS does not exist!"
     fi
 
+    ensure_config_path
+
     VERSION_FILE=$SHARED_DIR/version
 
     [ -f $VERSION_FILE ] && version=$(cat $VERSION_FILE)