ufw package integration

[Jamie Strandboge]

On Thu, 04 Sep 2008, James Dinkel wrote:

>    I would say leave the ports open and leave the profile files.  Leave it up
>    to the user to manage the firewall.  If the package is removed, it's not
>    going to be listening on those ports any more anyway.
> 

This is almost what happens. The profile files are conffiles, so they
are removed on purge. However, users can still a) see the application
rule via 'ufw status' and b) still delete the application rule by using
the profile name.

Jamie

-- 
Ubuntu Security Engineer     | http://www.ubuntu.com/
Canonical Ltd.               | http://www.canonical.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-server/attachments/20080905/634b16f8/attachment.pgp>