Re: firewalld-0.3.5

[Michael Biebl]

Hi,

2013/9/30 Jiri Popelka <jpopelka(a)redhat.com&gt;:
>  Hi all,
>
>  exactly after 2 months after 0.3.4 we've released 0.3.5, which contains lots
>  of bug-fixes.
>  https://fedorahosted.org/released/firewalld/firewalld-0.3.5.tar.bz2 

firewalld 0.3.5 fails to start on Debian:

root@pluto:~# firewalld --nofork --nopid
Traceback (most recent call last):
  File "/usr/sbin/firewalld", line 128, in <module>
    from firewall.server import server
  File "/usr/lib/python2.7/dist-packages/firewall/server/server.py",
line 42, in <module>
    from firewall.server.firewalld import FirewallD
  File "/usr/lib/python2.7/dist-packages/firewall/server/firewalld.py",
line 34, in <module>
    from firewall.core.fw import Firewall
  File "/usr/lib/python2.7/dist-packages/firewall/core/fw.py", line
29, in <module>
    from firewall.core.base import IPV6_NAT
  File "/usr/lib/python2.7/dist-packages/firewall/core/base.py", line
22, in <module>
    (major, minor, release) = os.uname()[2].split('.', 2)
ValueError: need more than 2 values to unpack


Problem is this code:

import os
(major, minor, release) = os.uname()[2].split('.', 2)
# http://kernelnewbies.org/Linux_3.7
IPV6_NAT = int(major) >= 3 and int(minor) >= 7

First of all, checking for the kernel version is probably not
sufficient, as this doesn't guarantee that CONFIG_NF_NAT_IPV6 is
actually set.
Second, on my Debian sid system, "uname -r" gives 3.10-3-amd64, so
splitting that string via "." doesn't work as expected.

Maybe there is a more robust way, to check if the kernel supports IPv6
NAT, like "grep -q nf_nat_ipv6 /proc/kallsyms" ?

Michael


-- 
Why is it that all of the instruments seeking intelligent life in the
universe are pointed away from Earth?