[f18-branch/master] return to using lokkit for firewall setup (#885807)
Bill Nottingham
notting at redhat.com
Tue Dec 11 18:53:13 UTC 2012
Brian C. Lane (bcl at redhat.com) said:
> From: "Brian C. Lane" <bcl at redhat.com>
>
> firewalld has some issues, especially with minimal installs and dragging
> in a bunch of X dependencies.
>
> This returns to using lokkit for firewall. The differences from before are:
> - require lokkit instead of system-config-firewall-base so that maybe
> something else could provide lokkit with the same cmdline args.
> - don't use -f which would override the selinux setting which we are
> still setting directly.
This means that it writes a firewall that won't actually do anything on
boot (the iptables service isn't run/enabled by default, unless other
changes are made.) I don't think that's better...
Bill
More information about the anaconda-patches
mailing list