----- Original Message -----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
We don't need open or preconfigured high ports.
What we really need is a user notification with options to allow or
deny like we do with SELinux.
That would be a appropriate solution for a workstation.
No it wouldn't be, because users don't like being asked security questions,
even less so when they don't have the skills to understand the consequences
of their choices.
The changes were vouched for by the Fedora and GNOME designers, as well as
the firewalld maintainers.