[f18-branch/master] return to using lokkit for firewall setup (#885807)

Bill Nottingham notting at redhat.com
Tue Dec 11 18:53:13 UTC 2012


Brian C. Lane (bcl at redhat.com) said: 
> From: "Brian C. Lane" <bcl at redhat.com>
> 
> firewalld has some issues, especially with minimal installs and dragging
> in a bunch of X dependencies.
> 
> This returns to using lokkit for firewall. The differences from before are:
>  - require lokkit instead of system-config-firewall-base so that maybe
>    something else could provide lokkit with the same cmdline args.
>  - don't use -f which would override the selinux setting which we are
>    still setting directly.

This means that it writes a firewall that won't actually do anything on
boot (the iptables service isn't run/enabled by default, unless other
changes are made.) I don't think that's better...

Bill


More information about the anaconda-patches mailing list