diff --git a/Shorewall/Perl/prog.footer b/Shorewall/Perl/prog.footer
index e5c81f5e7..5936bda96 100644
--- a/Shorewall/Perl/prog.footer
+++ b/Shorewall/Perl/prog.footer
@@ -130,6 +130,8 @@ g_docker=
g_dockernetwork=
g_forcereload=
+[ -n "$SERVICEDIR" ] && SUBSYSLOCK=
+
initialize
if [ -n "$STARTUP_LOG" ]; then
diff --git a/Shorewall/manpages/shorewall.conf.xml b/Shorewall/manpages/shorewall.conf.xml
index 6104edfe6..6faa5a992 100644
--- a/Shorewall/manpages/shorewall.conf.xml
+++ b/Shorewall/manpages/shorewall.conf.xml
@@ -2570,9 +2570,19 @@ INLINE - - - ;; -j REJECT
This parameter should be set to the name of a file that the
firewall should create if it starts successfully and remove when it
stops. Creating and removing this file allows Shorewall to work with
- your distribution's initscripts. For RedHat and OpenSuSE, this
- should be set to /var/lock/subsys/shorewall. For Debian, the value
- is /var/lock/shorewall and in LEAF it is /var/run/shorewall.
+ your distribution's initscripts. For OpenSuSE, this should be set to
+ /var/lock/subsys/shorewall (var/lock/subsys/shorewall-lite if
+ building for export). For Gentoo, it should be set to
+ /run/lock/shorewall (/run/lock/shorewall-lite). For Redhat and
+ derivatives as well as Debian and derivatives, the pathname should
+ be omitted.
+
+
+ Beginning with Shorewall 5.1.0, this setting is ignored when
+ SERVICEDIR is non-empty in
+ ${SHAREDIR}/shorewall/shorewallrc (usually
+ /usr/share/shorewall/shorewallrc).
+
diff --git a/Shorewall6/manpages/shorewall6.conf.xml b/Shorewall6/manpages/shorewall6.conf.xml
index 5978725a2..ebee8e8c5 100644
--- a/Shorewall6/manpages/shorewall6.conf.xml
+++ b/Shorewall6/manpages/shorewall6.conf.xml
@@ -2204,10 +2204,20 @@ INLINE - - - ;; -j REJECT
This parameter should be set to the name of a file that the
firewall should create if it starts successfully and remove when it
- stops. Creating and removing this file allows Shorewall6 to work
- with your distribution's initscripts. For RedHat, this should be set
- to /var/lock/subsys/shorewall6. For Debian, the value is
- /var/lock/shorewall6 and in LEAF it is /var/run/shorewall.
+ stops. Creating and removing this file allows Shorewall to work with
+ your distribution's initscripts. For OpenSuSE, this should be set to
+ /var/lock/subsys/shorewall6 (var/lock/subsys/shorewall6-lite if
+ building for export). For Gentoo, it should be set to
+ /run/lock/shorewall6 (/run/lock/shorewall6-lite). For Redhat and
+ derivatives as well as Debian and derivatives, the pathname should
+ be omitted.
+
+
+ Beginning with Shorewall 5.1.0, this setting is ignored when
+ SERVICEDIR is non-empty in
+ ${SHAREDIR}/shorewall/shorewallrc (usually
+ /usr/share/shorewall/shorewallrc).
+