Removing firewall-config from the default install of Fedora Workstation

Christoph Wickert christoph.wickert at gmail.com
Fri Aug 22 15:08:30 UTC 2014


Am Donnerstag, den 21.08.2014, 14:10 -0500 schrieb Michael Catanzaro:
> On Thu, 2014-08-21 at 22:03 +0300, Elad Alfassa wrote:
> > Hello.
> > 
> > 
> > I propose we remove firewall-config (the graphical firewall
> > configuration utility) from the default install of Fedora Workstation.
> > 
> > Rationale:
> 
> I want to add one major point that was missed: we're specifically trying
> to avoid applications that are not simple for nontechnical users to
> understand and use. firewall-config is pretty intimidating once you open
> it up, with a list of complicated "services" and ports ("what's a port?
> my computer only has four ports.")

I don't think we missed that point, in fact it was already addressed
earlier by Thomas, when he quoted the workstation's mission statement:
"The system will primarily be aimed at providing a platform for 
development of server side and client applications that is attractive to
a range of developers - from hobbyists and students to developers 
working in corporate environments."

So if the goal of the platform is development and our target audience
are hobbyists, students, and developers, how can "simple enough for
non-technical users" be a criteria for inclusion of apps?

> If it's really important then we should keep it, but if it just works
> out of the box as I've heard (thanks to the firewalld team for working
> on this!), then hopefully it can go.

Accessing the internet does work out of the box, but FWIW a lot of
client and server development will not. Therefor I suggest we keep
firewall-config for now and continue to improve it's UI. 

Best regards,
Christoph



More information about the firewalld-devel mailing list