F21 System Wide Change: Workstation: Disable firewall

drago01 drago01 at gmail.com
Sun Apr 20 22:59:10 UTC 2014


On Mon, Apr 21, 2014 at 12:39 AM, Reindl Harald <h.reindl at thelounge.net> wrote:

>> There have been other suggestions in this thread that are helpful like
>> the network zones thing (but we still have too many zones) or enabling
>> services should make them work i.e
>> just enable the firewall rules.
>
> which make sense

Oh finally you seem to understand what this is all about (a few mails
ago this was supposed to be "strongly prohibited" ...)
Now please goolge for "Psychological Acceptability and Security" you
will find tons of scientific papers (read them) explaining about why
it is wrong to silently break stuff or ask "yes / no" question or
arguing with "this is not a blackbox the user should learn" nonsense.

There is difference between a software developer, a sysadmin and a
user that simply wants to share his music with his family.  The latter
should not have to learn about computer security to do it,
while for the former it does not matter that much as you said because
they ought to know what to do or where to get that information from.

As for filling bugs because its broken even if it is not (obviously)
exploitable because security mechanisms (firewall, selinux, nx, ...)
are in place does not mean that we should not fix them..


More information about the devel mailing list