From c940bed072236ee01016607cdc2ba0ad26fb215e Mon Sep 17 00:00:00 2001
From: Vadim Kurland <vadim@netcitadel.com>
Date: Wed, 22 Jun 2011 14:55:53 -0700
Subject: [PATCH] see #2521 "Compile fails if firewall has locked interface
 that is set to dynamic".

---
 doc/ChangeLog                       | 3 +++
 src/compiler_lib/CompilerDriver.cpp | 1 +
 2 files changed, 4 insertions(+)

diff --git a/doc/ChangeLog b/doc/ChangeLog
index c482d0ddf..57a3316c9 100644
--- a/doc/ChangeLog
+++ b/doc/ChangeLog
@@ -1,5 +1,8 @@
 2011-06-22  Vadim Kurland  <vadim@netcitadel.com>
 
+	* CompilerDriver.cpp (CompilerDriver): fixed #2521 "Compile fails
+	if firewall has locked interface that is set to dynamic".
+
 	* NATCompiler_pf_writers.cpp (_printProtocol): see #2524 'avoid
 	" {tcp udp icmp} " in place of protocol'. NAT compiler for PF does
 	not need to generate protocol match "proto {tcp udp icmp}" when
diff --git a/src/compiler_lib/CompilerDriver.cpp b/src/compiler_lib/CompilerDriver.cpp
index 44dd8a096..74b29b469 100644
--- a/src/compiler_lib/CompilerDriver.cpp
+++ b/src/compiler_lib/CompilerDriver.cpp
@@ -95,6 +95,7 @@ CompilerDriver::CompilerDriver(FWObjectDatabase *db) : BaseCompiler()
     fw_by_id = false;
 
     objdb = new FWObjectDatabase(*db);
+    objdb->setIgnoreReadOnlyFlag(true);
 
     //objdb = db;