raising warning flag on firewalld-default feature

[Richard W.M. Jones]

On Tue, Nov 20, 2012 at 12:52:30PM -0500, Przemek Klosowski wrote:
> Interpreters do not preclude simple data: they just scale better,
> from simple linear declarative data to complex, Turing-cranking
> swamp. The only argument against it is runtime overhead, which isn't
> a problem in many, if not most, cases.

It's NOT the only argument against it.  Having Turing-complete
configuration files makes it impossible to have other programs parse
and understand the configuration.  Programs including:

 - OpenSCAP, or any other security scanner
 - libvirt (hello, old Xen's python config files)
 - multiple libguestfs tools like virt-sysprep
 - Augeas and all the tools that use it

Rich.

-- 
Richard Jones, Virtualization Group, Red Hat http://people.redhat.com/~rjones
New in Fedora 11: Fedora Windows cross-compiler. Compile Windows
programs, test, and build Windows installers. Over 70 libraries supprt'd
http://fedoraproject.org/wiki/MinGW http://www.annexia.org/fedora_mingw