[f18-branch/master] return to using lokkit for firewall setup (#885807)

Brian C. Lane bcl at redhat.com
Tue Dec 11 22:08:16 UTC 2012


On Tue, Dec 11, 2012 at 01:53:13PM -0500, Bill Nottingham wrote:
> Brian C. Lane (bcl at redhat.com) said: 
> > From: "Brian C. Lane" <bcl at redhat.com>
> > 
> > firewalld has some issues, especially with minimal installs and dragging
> > in a bunch of X dependencies.
> > 
> > This returns to using lokkit for firewall. The differences from before are:
> >  - require lokkit instead of system-config-firewall-base so that maybe
> >    something else could provide lokkit with the same cmdline args.
> >  - don't use -f which would override the selinux setting which we are
> >    still setting directly.
> 
> This means that it writes a firewall that won't actually do anything on
> boot (the iptables service isn't run/enabled by default, unless other
> changes are made.) I don't think that's better...

Right, this is only one piece of the puzzle. It looks like we're not
going to make this change, it is too much for this late date and
firewalld is going to sort things out itself. So I'll drop this patch
into the bug and we can revisit at a later time if needed.

-- 
Brian C. Lane | Anaconda Team | IRC: bcl #anaconda | Port Orchard, WA (PST8PDT)
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 482 bytes
Desc: not available
URL: <https://lists.fedorahosted.org/pipermail/anaconda-patches/attachments/20121211/d494fd1c/attachment.sig>


More information about the anaconda-patches mailing list