commit 7b92e7134c6f8edd3ba7069778ce2b7b09c789a0 Author: Pete Travis immanetize@fedoraproject.org Date: Thu May 9 00:29:06 2013 -0600
Added ModemManager and firewalld lockdown to Networking beat
en-US/Networking.xml | 47 ++++++++++++++++++++++++++++++++++++++++++++++- 1 files changed, 46 insertions(+), 1 deletions(-) --- diff --git a/en-US/Networking.xml b/en-US/Networking.xml index 91283c7..61743d0 100644 --- a/en-US/Networking.xml +++ b/en-US/Networking.xml @@ -5,6 +5,51 @@
<section> <title>Networking</title> - <para /> + + <section> + <title>Improved Mobile Broadband support</title> + <para> + Fedora &PRODVER; includes a new, more capable version of <application>ModemManager</application> for interacting with mobile broadband devices. This version provides better support for multi-mode devices like <productname>Qualcomm Gobi</productname> WWAN cards and and other devices that support the <literal>CDMA/EVDO/LTE</literal> standards, the <literal>GSM/UMTS/LTE</literal> standards, or devices that can support either. To provide this support, the <application>D-Bus</application> API of <application>ModemManager</application> has changed, which may require updates in applications that interact with <application>ModemManager</application> to control WWAN devices. + </para> + <para> + Many devices will connect and authenticate using the <application>NetworkManager</application> GUI. <command>nm-cli</command> has added features to configure mobile connections. For more detailed usage information, consult <ulink url='http://fedoraproject.org/wiki/Features/MoreMobileBroadband' /> . + </para> + </section> + + <section> + <title>firewalld improvements</title> + <para> + <application>firewalld</application>, introduced as the default firewall solution for Fedora &PREVVER;, adds new features to allow easy configuration of powerful firewalls. + </para> + <section> + <title>Locking the firewall and whitelisting changes</title> + <!-- Feature page lists as 80% complete as of 9MAY2013; leaving a limited usage summary for now --> + <para> + Dynamic firewall configuration by applications can now be locked down completely, or limited to a whitelist. The whitelist can contain commands, users, UIDs, and selinux contexts. + </para> + <para> + To lock down the firewall, set <command>Lockdown=yes</command> in <filename>/etc/firewalld/firewalld.conf</filename> and reload the firewall. + <screen> + <command>firewall-cmd --reload</command> + </screen> + The firewall should be reloaded for any changes to the whitelist to take effect. + </para> + <para> + The whitelist configuration is located in <filename>/etc/firewalld/lockdown-whitelist.xml</filename> and is empty by default. The whitelist below will allow only <command>firewall-cmd</command> to make changes to the firewall. The <emphasis>'*'</emphasis> character allows the rule to match arguments passed to <command>firewall-cmd</command> + <screen> +<![CDATA[ +<whitelist> + <command name="/usr/bin/python /bin/firewall-cmd*" /> +</whitelist> +]]> + </screen> + </para> + <para> + For more information on <application>firewalld</application> lockdown, consult the feature page at <ulink url="http://fedoraproject.org/wiki/Features/FirewalldLockdown" /> + </para> + </section> + </section> + + </section>