Backwards-compatible /proc and sysctl conntrack entries
Chuck Ebbert
cebbert at redhat.com
Tue Mar 27 21:48:40 UTC 2007
Dave Jones wrote:
> On Tue, Mar 27, 2007 at 03:13:22PM -0400, Chuck Ebbert wrote:
> > Josh Boyer wrote:
> > >> Users also have firewall configuration scripts that rely on these
> > >> entries.
> > >
> > > Damn. That does suck.
> > >
> > > So how long does upstream intend to keep CONFIG_NF_CONNTRACK_PROC_COMPAT
> > > around?
> >
> > Until FC-6 dies, hopefully... :)
> >
> > A new comment in bz 234174 is interesting:
> >
> > | Or, ideally, the kernel rpm should look into obvious places (e.g.
> > | /etc/sysconfig/iptables-config, /etc/sysctl.conf) and do some perl -pie magic.
>
> This would break booting back into the earlier kernel (which used to work
> until we munged these files).
>
Maybe we could create symlinks in the new kernel directory so the old module
names would work?
> I think enabling the compat stuff for FC6's lifetime should be safe.
> Hopefully upstream won't rip them out too soon.
We'll just leave FC 6 on 2.6.20 until 2.6.21 is stable, i.e. forever. :)
More information about the Fedora-kernel-list
mailing list