mirror of https://github.com/apache/cloudstack.git
f2b8f2eade
To configure firewall rules, CloudStack modifies `/etc/sysctl.conf` and
execute those modifications. This may be harmful for several reasons:
1. `/etc/sysctl.conf` may be managed by some configuration management
system. Such a system will constantly restore the previous version.
2. `/etc/sysctl.conf` may contain additional properties that have been
changed later by some system administrator (for example, once a
firewall has been configured, forwarding may have been activated
while it is disabled in `/etc/sysctl.conf`). Executing the file
again at a later time may disrupt the system.
3. Entries are added again and again. `/etc/sysctl.conf` will contain
the same directives repeated several times.
Using a configuration file is not needed as `sysctl` is able to directly
modify sysctl values with `-w` flag.
Signed-off-by: Vincent Bernat <Vincent.Bernat@exoscale.ch>
|
||
|---|---|---|
| .. | ||
| ConfigFileOps.py | ||
| OvmCommonModule.py | ||
| OvmDiskModule.py | ||
| OvmDispatcher.py | ||
| OvmFaultConstants.py | ||
| OvmHaHeartBeatModule.py | ||
| OvmHostModule.py | ||
| OvmLoggerModule.py | ||
| OvmNetworkModule.py | ||
| OvmOCFS2Module.py | ||
| OvmObjectModule.py | ||
| OvmSecurityGroupModule.py | ||
| OvmStoragePoolModule.py | ||
| OvmVifModule.py | ||
| OvmVmModule.py | ||
| OvmVolumeModule.py | ||
| configureOvm.sh | ||