Brian C. Lane (bcl(a)redhat.com) said:
From: "Brian C. Lane" <bcl(a)redhat.com>
firewalld has some issues, especially with minimal installs and dragging
in a bunch of X dependencies.
This returns to using lokkit for firewall. The differences from before are:
- require lokkit instead of system-config-firewall-base so that maybe
something else could provide lokkit with the same cmdline args.
- don't use -f which would override the selinux setting which we are
still setting directly.
This means that it writes a firewall that won't actually do anything on
boot (the iptables service isn't run/enabled by default, unless other
changes are made.) I don't think that's better...
Bill