running firewall-cmd from a detached script
Thomas Woerner
twoerner at redhat.com
Mon Aug 4 12:52:37 UTC 2014
Hello,
On 08/01/2014 04:21 PM, Nikos Mavrogiannopoulos wrote:
>
> Hello,
> I'm trying to run firewall-cmd (0.3.9 on RHEL7) under a script that is
> run by a vpn server (as root) on a client connect. The command is
> something like the following:
> #!/bin/sh
> firewall-cmd --zone=internal --add-interface=$DEVICE
>
> However, that script seems to hang and firewall-cmd never returns.
> Running the same command from a terminal or using screen succeeds. Is
> there some requirement of firewall-cmd to run from a terminal?
>
please verify which user and group is used for this script. Are there
AVC messages or any other error message in the logs at this time?
> Any ideas on how to debug?
>
> The hanged process on gdb seems to block at:
> #0 0x00007f1dd5a76df0 in __poll_nocancel () from /lib64/libc.so.6
> #1 0x00007f1dcb19d780 in socket_do_iteration ()
> from /lib64/libdbus-1.so.3
> #2 0x00007f1dcb19c5ff in _dbus_transport_do_iteration ()
> from /lib64/libdbus-1.so.3
> #3 0x00007f1dcb185d7c in _dbus_connection_do_iteration_unlocked ()
> from /lib64/libdbus-1.so.3
> #4 0x00007f1dcb18687c in _dbus_connection_block_pending_call ()
> from /lib64/libdbus-1.so.3
> #5 0x00007f1dcb186d3a in dbus_connection_send_with_reply_and_block ()
> from /lib64/libdbus-1.so.3
> #6 0x00007f1dcb3ca0df in Connection_send_message_with_reply_and_block
> ()
> from /usr/lib64/python2.7/site-packages/_dbus_bindings.so
> #7 0x00007f1dd6751b94 in PyEval_EvalFrameEx ()
> from /lib64/libpython2.7.so.1.0
> #8 0x00007f1dd67531ad in PyEval_EvalCodeEx ()
> from /lib64/libpython2.7.so.1.0
>
>
I have not seen this error before.
Regards,
Thomas
More information about the firewalld-users
mailing list