"Workstation" Product defaults to wide-open firewall

[Reindl Harald]

Am 08.12.2014 um 17:10 schrieb Bastien Nocera:
>>> Security is about compromises. The net result of the old firewall settings
>>> was people disabling the firewall.
>>
>> And the net result of the new firewall settings is you disabling the
>> firewall for them,
>
> It's not disabled

it is practically

the only port unprivileged code can listen on is > 1024, you opened that

>> The new firewall settings essentially amount to disabling the firewall.
>
> It doesn't

it does

the only port unprivileged code can listen on is > 1024, you opened that

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20141208/3302d75b/attachment.sig>