mirror of
https://github.com/QubesOS/qubes-doc.git
synced 2025-03-01 03:11:19 -05:00
141ed82589
Handling each rule separately makes sense on from qvm-firewall tool point of view, but not from overall configuration integrity. If multiple tools try to configure firewall simultaneously, doing it at individual rules level can end very badly. So, get/set the whole firewall at once. If some race condition happen here, it will end up with one firewall rules set being overwritten by the other one. But it will still be a consistent rules set.