Package: ufw Version: 0.36-1 Severity: grave Justification: renders package unusable
ufw fails to start with iptables 1.8.4-2, even after #946289 is fixed. Downgrading to iptables 1.8.3-2 fixes this. iptables-restore (iptables-nft-restore) can no longer handle blank lines in the restored file. Jan 21 06:39:42 hostname ufw-init[39272]: iptables-restore: COMMIT expected at line 19 Jan 21 06:39:42 hostname ufw-init[39373]: ip6tables-restore: COMMIT expected at line 19 Jan 21 06:39:42 hostname ufw-init[39379]: Problem running '/etc/ufw/user.rules' Jan 21 06:39:42 hostname ufw-init[39379]: Problem running '/etc/ufw/user6.rules' Line 19 is the first blank line after the '### RULES ###' in user.rules: % sudo head -n19 /etc/ufw/user.rules *filter :ufw-user-input - [0:0] :ufw-user-output - [0:0] :ufw-user-forward - [0:0] :ufw-before-logging-input - [0:0] :ufw-before-logging-output - [0:0] :ufw-before-logging-forward - [0:0] :ufw-user-logging-input - [0:0] :ufw-user-logging-output - [0:0] :ufw-user-logging-forward - [0:0] :ufw-after-logging-input - [0:0] :ufw-after-logging-output - [0:0] :ufw-after-logging-forward - [0:0] :ufw-logging-deny - [0:0] :ufw-logging-allow - [0:0] :ufw-user-limit - [0:0] :ufw-user-limit-accept - [0:0] ### RULES ### :ufw-after-logging-forward - [0:0] :ufw-logging-deny - [0:0] :ufw-logging-allow - [0:0] :ufw-user-limit - [0:0] :ufw-user-limit-accept - [0:0] ### RULES ### % Tiny reproduction: paul@vm$ echo -ne '*filter\n:otters - [0:0]\n# this is a comment\n\n-A otters -j ACCEPT\nCOMMIT\n' > has-blank-line.txt paul@vm$ echo -ne '*filter\n:otters - [0:0]\n# this is a comment\n-A otters -j ACCEPT\nCOMMIT\n' > has-no-blank-line.txt paul@vm$ sudo iptables-restore -v -n <has-blank-line.txt ; echo iptables-restore: COMMIT expected at line 4 # this is a comment paul@vm$ sudo iptables-restore -v -n <has-no-blank-line.txt ; echo # this is a comment paul@vm$ -- System Information: Debian Release: bullseye/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'unstable'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.4.0-3-amd64 (SMP w/4 CPU cores) Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages ufw depends on: ii debconf [debconf-2.0] 1.5.73 hi iptables 1.8.3-2 ii lsb-base 11.1.0 ii python3 3.7.5-3 ii ucf 3.0038+nmu1 ufw recommends no packages. Versions of packages ufw suggests: ii rsyslog 8.1911.0-1 -- Configuration Files: /etc/default/ufw changed [not included] -- debconf information excluded
