[firewalld] Added missing firewalld-0.2.6-MDNS-default.patch patch

Thomas Woerner twoerner at fedoraproject.org
Tue Aug 7 11:30:34 UTC 2012


commit c1ea5a48c4faf9646e54ec764afbd6e22375218e
Author: Thomas Woerner <twoerner at redhat.com>
Date:   Tue Aug 7 13:30:17 2012 +0200

    Added missing firewalld-0.2.6-MDNS-default.patch patch

 firewalld-0.2.6-MDNS-default.patch |   41 ++++++++++++++++++++++++++++++++++++
 1 files changed, 41 insertions(+), 0 deletions(-)
---
diff --git a/firewalld-0.2.6-MDNS-default.patch b/firewalld-0.2.6-MDNS-default.patch
new file mode 100644
index 0000000..b59803f
--- /dev/null
+++ b/firewalld-0.2.6-MDNS-default.patch
@@ -0,0 +1,41 @@
+From 0e9306e9df41142503b4efc90032043183a3cb7b Mon Sep 17 00:00:00 2001
+From: Stef Walter <stefw at gnome.org>
+Date: Mon, 6 Aug 2012 10:01:09 +0200
+Subject: [PATCH] Make MDNS work in all but the most restrictive zones
+
+ * MDNS is a discovery protocol, and much like DNS or DHCP should
+   be available for the network to function as expected.
+ * Avahi (the main MDNS) implementation has taken steps to make sure
+   no private information is published by default.
+ * See: https://fedoraproject.org/wiki/Desktop/Whiteboards/AvahiDefault
+---
+ config/zones/public.xml | 1 +
+ config/zones/work.xml   | 1 +
+ 2 files changed, 2 insertions(+)
+
+diff --git a/config/zones/public.xml b/config/zones/public.xml
+index 929ad72..a56e95c 100644
+--- a/config/zones/public.xml
++++ b/config/zones/public.xml
+@@ -3,5 +3,6 @@
+   <short>Public</short>
+   <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
+   <service name="ssh"/>
++  <service name="mdns"/>
+   <service name="dhcpv6-client"/>
+ </zone>
+diff --git a/config/zones/work.xml b/config/zones/work.xml
+index 7e750fc..77f13c8 100644
+--- a/config/zones/work.xml
++++ b/config/zones/work.xml
+@@ -3,6 +3,7 @@
+   <short>Work</short>
+   <description>For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
+   <service name="ssh"/>
++  <service name="mdns"/>
+   <service name="ipp-client"/>
+   <service name="dhcpv6-client"/>
+ </zone>
+-- 
+1.7.11.2
+


More information about the scm-commits mailing list