[CentOS] Bug in init scripts for ipset?
Tony Mountifield
tony at softins.co.ukThu Sep 24 14:43:42 UTC 2015
- Previous message: [CentOS] decode http hack attempt?
- Next message: [CentOS] Bug in init scripts for ipset?
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
I've just started experimenting with ipset under CentOS 6, and have found what appears to be a bug (or poor design) in the init scripts for ipset, /etc/rc.d/init.d/ipset In stop(), save() and status(), it does lsmod to check for the existence of the ip_set module. If the module is not found, it exits without performing any action. This doesn't take account of a kernel where the ip_set code is compiled in instead of being a loadable module. An example would be my CentOS 6 virtual machine at Linode. It has a Linode-compiled kernel 4.1.0 with no separately-loaded modules. It certainly supports ipset, as I have successfully tried some test rules. However, I wondered why giving the command "service ipset save" didn't result in /etc/sysconfig/ipset being written, and discovered the cause I described above. Surely there should be a better way of determining whether the kernel includes ipset support than just looking for a module? Cheers Tony -- Tony Mountifield Work: tony at softins.co.uk - http://www.softins.co.uk Play: tony at mountifield.org - http://tony.mountifield.org
- Previous message: [CentOS] decode http hack attempt?
- Next message: [CentOS] Bug in init scripts for ipset?
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
More information about the CentOS mailing list