[firewalld] Added missing firewalld-0.2.6-MDNS-default.patch patch
Thomas Woerner
twoerner at fedoraproject.org
Tue Aug 7 11:30:34 UTC 2012
commit c1ea5a48c4faf9646e54ec764afbd6e22375218e
Author: Thomas Woerner <twoerner at redhat.com>
Date: Tue Aug 7 13:30:17 2012 +0200
Added missing firewalld-0.2.6-MDNS-default.patch patch
firewalld-0.2.6-MDNS-default.patch | 41 ++++++++++++++++++++++++++++++++++++
1 files changed, 41 insertions(+), 0 deletions(-)
---
diff --git a/firewalld-0.2.6-MDNS-default.patch b/firewalld-0.2.6-MDNS-default.patch
new file mode 100644
index 0000000..b59803f
--- /dev/null
+++ b/firewalld-0.2.6-MDNS-default.patch
@@ -0,0 +1,41 @@
+From 0e9306e9df41142503b4efc90032043183a3cb7b Mon Sep 17 00:00:00 2001
+From: Stef Walter <stefw at gnome.org>
+Date: Mon, 6 Aug 2012 10:01:09 +0200
+Subject: [PATCH] Make MDNS work in all but the most restrictive zones
+
+ * MDNS is a discovery protocol, and much like DNS or DHCP should
+ be available for the network to function as expected.
+ * Avahi (the main MDNS) implementation has taken steps to make sure
+ no private information is published by default.
+ * See: https://fedoraproject.org/wiki/Desktop/Whiteboards/AvahiDefault
+---
+ config/zones/public.xml | 1 +
+ config/zones/work.xml | 1 +
+ 2 files changed, 2 insertions(+)
+
+diff --git a/config/zones/public.xml b/config/zones/public.xml
+index 929ad72..a56e95c 100644
+--- a/config/zones/public.xml
++++ b/config/zones/public.xml
+@@ -3,5 +3,6 @@
+ <short>Public</short>
+ <description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
+ <service name="ssh"/>
++ <service name="mdns"/>
+ <service name="dhcpv6-client"/>
+ </zone>
+diff --git a/config/zones/work.xml b/config/zones/work.xml
+index 7e750fc..77f13c8 100644
+--- a/config/zones/work.xml
++++ b/config/zones/work.xml
+@@ -3,6 +3,7 @@
+ <short>Work</short>
+ <description>For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
+ <service name="ssh"/>
++ <service name="mdns"/>
+ <service name="ipp-client"/>
+ <service name="dhcpv6-client"/>
+ </zone>
+--
+1.7.11.2
+
More information about the scm-commits
mailing list