puppetlabs/puppetlabs-firewall — pull request #74 by dcarley (2012-05-08 10:49:56+00:00)
Title: (#10665) Add proper iptables rule persistence

Replaces the previous Exec recommendation which was unable to persist purges
of unmanaged rules. Currently supports EL clones and Debian, as before.
Ubuntu is not supported because it favours UFW. Works for iptables and
ip6tables.

On EL the 'save' method of the sysvinit script is used, which takes care of
file permissions and race conditions.

On Debian the file mode is set to 0600.

--

I don't think it's possible to test this with rspec.