From c25513f9305bbb5afd8e525f08fc09aa911062b8 Mon Sep 17 00:00:00 2001
From: icequbes1 <71958531+icequbes1@users.noreply.github.com>
Date: Sat, 2 Jan 2021 13:07:27 -0800
Subject: [PATCH] Fix comments in default qubes-firewall-user-script

---
 init/setup-rw.sh | 14 +++++++++-----
 1 file changed, 9 insertions(+), 5 deletions(-)

diff --git a/init/setup-rw.sh b/init/setup-rw.sh
index 5fa74f5..3ee53c4 100755
--- a/init/setup-rw.sh
+++ b/init/setup-rw.sh
@@ -37,11 +37,15 @@ EOF
         cat > /rw/config/qubes-firewall-user-script <<EOF
 #!/bin/sh
 
-# This script is called in AppVMs after every firewall update (configuration
-# change, starting some VM etc). This is a good place to write own custom
-# firewall rules, in addition to autogenerated ones. Remember that in most cases
-# you'll need to insert the rules at the beginning (iptables -I) for it to be
-# effective.
+# This script is called at AppVM boot if this AppVM has the qubes-firewall
+# service enabled. It is executed after the empty chains for the Qubes firewall
+# are created, but before rules for attached qubes are processed and inserted.
+#
+# It is a good place for custom rules and actions that should occur when the
+# firewall service is started.
+# 
+# Executable scripts located in /rw/config/qubes-firewall.d are executed
+# immediately before this qubes-firewall-user-script.
 EOF
         chmod 755 /rw/config/qubes-firewall-user-script