Re: [Devil-linux-develop] Dansguardian

[Heiko Z. <he...@zu...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Thu, June 8, 2006 15:21, Bruce Smith wrote:
>>> Looking at the disk usage on /etc now, I see two other large
>>> directories that have potential for moving their /etc files to
>>> /config/*.tar.gz.
>>> One is snort.  The other is 'l7-protocols' ... no idea what it is ...
>>>
>>
>> (OSI model) Layer 7 (=application layer) protocol descriptions
>>
>
> Yeah, I guessed that much.  :-)
>
>
> What I meant was I have no idea what uses it, or what bad things will
> happen if it's not there.
>
>>> I see l7-protocols is created in patch-o-matic, but I'm not sure what
>>>  package(s) use it.  Is it something that can be moved too?  It's
>>> currently the largest subdirectory under /etc (about 1MB).
>>
>> I guess it's used by iptables or some other support tool. I have to
>> admit I did never use it before. I usually delete those subdirectories
>> which I don't need.
>
> I also guessed that it might be used by some iptables module that does
> l7 filtering.
>
> It's be good to know for sure what uses it to make sure we don't break
> something (like our stock firewall scripts) before we move it.

Yes it's for the l7 netfilter module.
As long as people don't load it, they don't need it.
What about moving the l7 stuff to a directory in the CD ? I don't think we
need write access for that.

>> I personally would like to see the following subdirectories of /etc/
>> moved to /config/etc-PACKAGE.tar.bz2 or so:
>> * apache2
>> * curl
>> * apcupsd
>> * awstats
>> * eagle-usb
>> * ha.d
>> * joe/{syntax,doc} (317k)
>> * l7-protocols (993k)
>> * lpd
>> * mgetty+sendfax
>> * openldap (224k)
>> * pcmcia (225k)
>> * postfix (241k)
>> * ppp
>> * raddb (305k)
>> * sarg (101k)
>> * shorewall (197k)
>> * snort (689k)
>> * socks
>> * ups
>> * wlan
>> * zebra
>>
>>
>> Total of the above is 4.3 MB of 7.0 MB for the whole etc.tar.bz2. So on
>> a very basic system my config would shrink by more than 50% compared to
>> now.
>
> Sounds good to me.
>
>
> One other thought...  We also need to modify the upgrade script (to a
> new DL version) so updates to files in those optional directories will also
> get applied.  I think that can be done without too much hassle.

May be worth it.

- -- 

Regards
  Heiko Zuerker
  http://www.devil-linux.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (GNU/Linux)

iEYEARECAAYFAkSIiLwACgkQUcytMSbs+YVrSACfUTAmESHL3ZIog+lAKQ43wbMt
aS0Anjy4Ay2jvzIGuaBCH4Ms/lOSpC9q
=MJIM
-----END PGP SIGNATURE-----