Hey,
When the iptables support was first added to libvirtd,
we proposed a change to iptables to allow us to register our
rules so that the rules would be automatically reloaded e.g.
"service iptables restart" was run or if the user modified
their firewall configuration with system-config-firewall. See:
https://bugzilla.redhat.com/227011
That proposal wasn't accepted and so users must
currently force libvirt to reload its iptables configuration
using SIGHUP in those circumstances.
However, since Fedora 8, lokkit has grown a --custom-rules
option which we can use to achieve the same effect. The following
series of patches does just that.
Most of the patches are pretty trivial; the only really
significant one is 7/9.
(Oh, 7/9 requires Dan's virFileReadAll() patch)
Thanks,
Mark.
--
--
Libvir-list mailing list
Libvir-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/libvir-list