Brian C. Lane (bcl@redhat.com) said:
From: "Brian C. Lane" bcl@redhat.com
firewalld has some issues, especially with minimal installs and dragging in a bunch of X dependencies.
This returns to using lokkit for firewall. The differences from before are:
- require lokkit instead of system-config-firewall-base so that maybe something else could provide lokkit with the same cmdline args.
- don't use -f which would override the selinux setting which we are still setting directly.
This means that it writes a firewall that won't actually do anything on boot (the iptables service isn't run/enabled by default, unless other changes are made.) I don't think that's better...
Bill