You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Hans Jerry Illikainen a0b8b85fa5 ufw: add support for interface_in and interface_out (#65382) ... * ufw: escalate privileges in integration tests A few of the integration tests for the UFW module forgot to `become`. This is problematic if the test suite is executed as a non-privileged user. This commit amends that by adding `become` when appropriate. * ufw: add unit tests for direction and interface Extend the unit tests for the UFW module to test the `direction` and `interface` parameters. This will help in the implementation of a fix for issue #63903. * ufw: add support for interface_in and interface_out The UFW module has support for specifying `direction` and `interface` for UFW rules. Rules with these parameters are built such that per-interface filtering only apply to a single direction based on the value of `direction`. Not being able to specify multiple interfaces complicates things for `routed` rules where one might want to apply filtering only for a specific combination of `in` and `out` interfaces. This commit introduces two new parameters to the UFW module: `interface_in` and `interface_out`. These rules are mutually exclusive with the old `direction` and `interface` parameter because of the ambiguity of having e.g.: direction: XXX interface: foo interface_XXX: bar Fixes #63903		5 years ago
..
basic.yml	Enable changed var with ufw check mode (#49948)	6 years ago
global-state.yml	ufw: fix default (again) (#55004)	6 years ago
insert_relative_to.yml	ufw: allow to insert rules relative to first/last IPv4/IPv6 rules (#49796)	6 years ago
interface.yml	ufw: add support for interface_in and interface_out (#65382)	5 years ago