From 2f1be166359b4c516c1dd60ccdb7f481274d189e Mon Sep 17 00:00:00 2001 From: anadahz Date: Sat, 9 Mar 2019 11:53:44 +0000 Subject: [PATCH] Remove policy option from man page Firewall policy is now hardcoded to 'drop'. QubesOS/qubes-issues#2869 --- doc/manpages/qvm-firewall.rst | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/doc/manpages/qvm-firewall.rst b/doc/manpages/qvm-firewall.rst index 00bdd30..d050b7d 100644 --- a/doc/manpages/qvm-firewall.rst +++ b/doc/manpages/qvm-firewall.rst @@ -12,8 +12,6 @@ Synopsis :command:`qvm-firewall` [-h] [--verbose] [--quiet] [--reload] *VMNAME* list [--raw] -:command:`qvm-firewall` [-h] [--verbose] [--quiet] [--reload] *VMNAME* policy {accept,drop} - Options ------- @@ -50,8 +48,6 @@ Available actions: * list - list all the rules for a given VM. -* policy - set default action if no rule matches. - Rule syntax ----------- @@ -61,8 +57,8 @@ A single rule is built from: - zero or more matches Selected action is applied to packets when all specified matches match, -further rules are not evaluated. If none of the rules match, the default action -(``policy``) is applied. +further rules are not evaluated. If none of the rules match, the default +firewall policy is ``drop``. Supported matches: - ``dsthost`` - destination host or network. Can be either IP address in CIDR