| Origin: r803, r804 |
| Description: Don't call get_netfilter_capabilities() with ipv6 if ipv6 is |
| disabled. |
| Bug-Ubuntu: https://launchpad.net/ufw/bugs/1039729 |
| |
| Upstream-Status: Inappropriate [ not author ] |
| |
| Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com> |
| |
| Index: ufw-0.33/src/backend.py |
| =================================================================== |
| --- ufw-0.33.orig/src/backend.py 2012-12-04 09:21:57.000000000 -0600 |
| +++ ufw-0.33/src/backend.py 2012-12-04 09:22:40.000000000 -0600 |
| @@ -98,15 +98,17 @@ |
| else: |
| self.caps['limit']['4'] = False |
| |
| - # v6 |
| - try: |
| - nf_caps = ufw.util.get_netfilter_capabilities(self.ip6tables) |
| - except OSError as e: |
| - error("initcaps\n%s" % e) |
| - if 'recent-set' in nf_caps and 'recent-update' in nf_caps: |
| - self.caps['limit']['6'] = True |
| - else: |
| - self.caps['limit']['6'] = False |
| + # v6 (skip capabilities check for ipv6 if ipv6 is disabled in ufw |
| + # because the system may not have ipv6 support (LP: #1039729) |
| + if self.use_ipv6(): |
| + try: |
| + nf_caps = ufw.util.get_netfilter_capabilities(self.ip6tables) |
| + except OSError as e: |
| + error("initcaps\n%s" % e) |
| + if 'recent-set' in nf_caps and 'recent-update' in nf_caps: |
| + self.caps['limit']['6'] = True |
| + else: |
| + self.caps['limit']['6'] = False |
| |
| def is_enabled(self): |
| '''Is firewall configured as enabled''' |