"Workstation" Product defaults to wide-open firewall

[Bastien Nocera]

----- Original Message -----
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> We don't need open or preconfigured high ports.
> 
> What we really need is a user notification with options to allow or
> deny like we do with SELinux.
> 
> That would be a appropriate solution for a workstation.

No it wouldn't be, because users don't like being asked security questions,
even less so when they don't have the skills to understand the consequences
of their choices.

The changes were vouched for by the Fedora and GNOME designers, as well as
the firewalld maintainers.