summaryrefslogtreecommitdiff
path: root/manifests/rules/torify/allow_tor_user.pp
diff options
context:
space:
mode:
authorMicah Anderson <micah@riseup.net>2012-06-20 13:47:45 -0400
committerMicah Anderson <micah@riseup.net>2012-06-20 13:47:45 -0400
commitf3448f4210260c1cfee72ae709a1ae0b8902d0d4 (patch)
treeea545e1ba4352be8b3a6b940d2e5be7a0a373ae9 /manifests/rules/torify/allow_tor_user.pp
parentc3452c911c5dba8b53b558169774d83c3e1908e4 (diff)
Revert "Support exempting some users from torification measures."
This reverts commit 6cb88973f53aa7d92414797dd21952c1c1d5da98.
Diffstat (limited to 'manifests/rules/torify/allow_tor_user.pp')
-rw-r--r--manifests/rules/torify/allow_tor_user.pp15
1 files changed, 15 insertions, 0 deletions
diff --git a/manifests/rules/torify/allow_tor_user.pp b/manifests/rules/torify/allow_tor_user.pp
new file mode 100644
index 0000000..f44c1f0
--- /dev/null
+++ b/manifests/rules/torify/allow_tor_user.pp
@@ -0,0 +1,15 @@
+class shorewall::rules::torify::allow_tor_user {
+
+ $whitelist_rule = "allow-from-tor-user"
+ if !defined(Shorewall::Rule["$whitelist_rule"]) {
+ shorewall::rule {
+ "$whitelist_rule":
+ source => '$FW',
+ destination => 'all',
+ user => $shorewall::tor_user,
+ order => 101,
+ action => 'ACCEPT';
+ }
+ }
+
+}