firewalld-0.3.5

Michael Biebl mbiebl at gmail.com
Mon Sep 30 22:50:08 UTC 2013


Hi,

2013/9/30 Jiri Popelka <jpopelka at redhat.com>:
> Hi all,
>
> exactly after 2 months after 0.3.4 we've released 0.3.5, which contains lots
> of bug-fixes.
> https://fedorahosted.org/released/firewalld/firewalld-0.3.5.tar.bz2


firewalld 0.3.5 fails to start on Debian:

root at pluto:~# firewalld --nofork --nopid
Traceback (most recent call last):
  File "/usr/sbin/firewalld", line 128, in <module>
    from firewall.server import server
  File "/usr/lib/python2.7/dist-packages/firewall/server/server.py",
line 42, in <module>
    from firewall.server.firewalld import FirewallD
  File "/usr/lib/python2.7/dist-packages/firewall/server/firewalld.py",
line 34, in <module>
    from firewall.core.fw import Firewall
  File "/usr/lib/python2.7/dist-packages/firewall/core/fw.py", line
29, in <module>
    from firewall.core.base import IPV6_NAT
  File "/usr/lib/python2.7/dist-packages/firewall/core/base.py", line
22, in <module>
    (major, minor, release) = os.uname()[2].split('.', 2)
ValueError: need more than 2 values to unpack


Problem is this code:

import os
(major, minor, release) = os.uname()[2].split('.', 2)
# http://kernelnewbies.org/Linux_3.7
IPV6_NAT = int(major) >= 3 and int(minor) >= 7

First of all, checking for the kernel version is probably not
sufficient, as this doesn't guarantee that CONFIG_NF_NAT_IPV6 is
actually set.
Second, on my Debian sid system, "uname -r" gives 3.10-3-amd64, so
splitting that string via "." doesn't work as expected.

Maybe there is a more robust way, to check if the kernel supports IPv6
NAT, like "grep -q nf_nat_ipv6 /proc/kallsyms" ?

Michael


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?


More information about the firewalld-devel mailing list