Generate config into domtool work directory and copy later

[hcoop/domtool2.git] / scripts / domtool-publish

diff --git a/scripts/domtool-publish b/scripts/domtool-publish
index b9f6ffc..811c464 100755 (executable)
--- a/scripts/domtool-publish
+++ b/scripts/domtool-publish
@@ -79,6 +79,11 @@ case $1 in
                /etc/init.d/apache2 reload
         ;;
         firewall)
                /etc/init.d/apache2 reload
         ;;
         firewall)

+              # Ideally this would check if the config worked first
+              # (ferm failing just uses the previous config at
+              # least). Does it need to chown/chmod the generated
+              # rules?
+              /bin/cp /var/domtool/firewall/{user_chains.conf,users_tcp_in.conf,users_tcp_out.conf} /etc/ferm/

               /etc/init.d/ferm reload
        ;;
        *)
               /etc/init.d/ferm reload
        ;;
        *)