summaryrefslogtreecommitdiff
path: root/src/Propellor/Property/Sbuild.hs
diff options
context:
space:
mode:
authorSean Whitton2016-05-21 09:44:36 +0900
committerSean Whitton2016-05-21 09:44:36 +0900
commitbc26ebc31bcb286a9e5991f65e0be49e0e7facf6 (patch)
treee33b8430b4853b1bb44708862b6f79c0c2c8630c /src/Propellor/Property/Sbuild.hs
parent04b11368f75c05f56f2ec5469c22e88f55ddf276 (diff)
Sbuild.blockNetwork bracketing
Diffstat (limited to 'src/Propellor/Property/Sbuild.hs')
-rw-r--r--src/Propellor/Property/Sbuild.hs6
1 files changed, 3 insertions, 3 deletions
diff --git a/src/Propellor/Property/Sbuild.hs b/src/Propellor/Property/Sbuild.hs
index 1d59fbec..1d18a6de 100644
--- a/src/Propellor/Property/Sbuild.hs
+++ b/src/Propellor/Property/Sbuild.hs
@@ -255,10 +255,10 @@ ccachePrepared = propertyList "sbuild group ccache configured" $ props
-- This is a hack from <https://wiki.debian.org/sbuild> until #802850 and
-- #802849 are resolved.
blockNetwork :: Property Linux
-blockNetwork = Firewall.rule Firewall.OUTPUT Firewall.Filter Firewall.DROP $
- Firewall.GroupOwner (Group "sbuild")
+blockNetwork = Firewall.rule Firewall.OUTPUT Firewall.Filter Firewall.DROP
+ (Firewall.GroupOwner (Group "sbuild")
<> Firewall.NotDestination
- [Firewall.IPWithNumMask (IPv4 "127.0.0.1") 8]
+ [Firewall.IPWithNumMask (IPv4 "127.0.0.1") 8])
`requires` installed -- sbuild group must exist
-- ==== utility functions ====