On Sat, Aug 23, 2014 at 09:52:11AM -0500, Michael Catanzaro wrote:
Our understanding is that client and server development WILL work out
of
the box, unlike F20. The goal is that very few users ever need to
configure the firewall. Our configuration can be seen at [1] and it
looks sufficiently permissive to me. (Is there something else we need to
address?) Whereas in F20 I spent much frustrating time trying to figure
out why my network programs worked on other Linuxes but not Fedora, in
F21 everything should just work, unless you're trying to use a system
port. I frankly cannot think of any reason I would ever want to open
firewall-config.
Michael
[1]
http://pkgs.fedoraproject.org/cgit/firewalld.git/tree/FedoraWorkstation.xml
Why is SSH in this list? Is it a common thing for a developer,
student, or hobbyist to want to connect back INTO their workstation
from a remote location? If so, is it common that they'd want a CLI
session vs. a full graphical session (Remote Desktop)?
I don't think it is obvious to some of these audiences that the local
account login password also allows remote access. I see people set a
simple password for a "throwaway" or "test" laptop for example, but
unfortunately this exposes them to being hacked via SSH.
Or is the SSH service shipped turned off by default in Fedora
Workstation?