F21 System Wide Change: Workstation: Disable firewall

[Liam]

Sent from mYphone
On Apr 20, 2014 7:02 PM, "drago01" <drago01 at gmail.com> wrote:
>
> On Mon, Apr 21, 2014 at 12:39 AM, Reindl Harald <h.reindl at thelounge.net>
wrote:
>
> >> There have been other suggestions in this thread that are helpful like
> >> the network zones thing (but we still have too many zones) or enabling
> >> services should make them work i.e
> >> just enable the firewall rules.
> >
> > which make sense
>
> Oh finally you seem to understand what this is all about (a few mails
> ago this was supposed to be "strongly prohibited" ...)
> Now please goolge for "Psychological Acceptability and Security" you
> will find tons of scientific papers (read them) explaining about why
> it is wrong to silently break stuff or ask "yes / no" question or
> arguing with "this is not a blackbox the user should learn" nonsense.
>
> There is difference between a software developer, a sysadmin and a
> user that simply wants to share his music with his family.  The latter
> should not have to learn about computer security to do it,
> while for the former it does not matter that much as you said because
> they ought to know what to do or where to get that information from.
>
The later isn't the target for Workstation, I don't believe. Since we can
assume more knowledge of the user given our mandate we don't have to be
quite so careful with what we expose.
Of course the firewalld GUI still needs work, along with the way Zones are
currently setup, but disabling those things makes no sense considering who
we're targeting. Why optimize for users we don't have against those we do
(or want)?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20140420/56962ce0/attachment.html>