On Tue, Dec 11, 2012 at 01:53:13PM -0500, Bill Nottingham wrote:
Brian C. Lane (bcl@redhat.com) said:
From: "Brian C. Lane" bcl@redhat.com
firewalld has some issues, especially with minimal installs and dragging in a bunch of X dependencies.
This returns to using lokkit for firewall. The differences from before are:
- require lokkit instead of system-config-firewall-base so that maybe something else could provide lokkit with the same cmdline args.
- don't use -f which would override the selinux setting which we are still setting directly.
This means that it writes a firewall that won't actually do anything on boot (the iptables service isn't run/enabled by default, unless other changes are made.) I don't think that's better...
Right, this is only one piece of the puzzle. It looks like we're not going to make this change, it is too much for this late date and firewalld is going to sort things out itself. So I'll drop this patch into the bug and we can revisit at a later time if needed.