From: Dietmar Maurer <dietmar@proxmox.com>
Date: Fri, 16 May 2014 04:24:07 +0000 (+0200)
Subject: do not abort if security groups does not exists
X-Git-Url: https://git.proxmox.com/?p=pve-firewall.git;a=commitdiff_plain;h=b4deedab3b7a041c0a7b5bd0bd2ac6644e041464

do not abort if security groups does not exists

Simply create an empty chain instead.
---

diff --git a/src/PVE/Firewall.pm b/src/PVE/Firewall.pm
index bd17ee6..fd83ba3 100644
--- a/src/PVE/Firewall.pm
+++ b/src/PVE/Firewall.pm
@@ -1728,10 +1728,14 @@ sub enable_host_firewall {
 
 sub generate_group_rules {
     my ($ruleset, $cluster_conf, $group) = @_;
-    die "no such security group '$group'\n" if !$cluster_conf->{groups}->{$group};
 
     my $rules = $cluster_conf->{groups}->{$group};
 
+    if (!$rules) {
+	warn "no such security group '$group'\n";
+	$rules = []; # create empty chain
+    }
+
     my $chain = "GROUP-${group}-IN";
 
     ruleset_create_chain($ruleset, $chain);