"Workstation" Product defaults to wide-open firewall

Bastien Nocera bnocera at redhat.com
Tue Dec 9 11:12:36 UTC 2014



----- Original Message -----
> Stephen Gallagher wrote:
> > Also, while I think it's been unclear in this thread, the main reason
> > that the firewall GUI was taken out was because the Workstation guys
> > want to design a more user-understandable one and include that directly
> > (if I am remembering that conversation correctly). The current one is
> > not terribly easy to understand (though it's certainly an improvement
> > over s-c-firewall).
> 
> Huh? Especially the last part really makes me go "huh?". System-config-
> firewall is dead simple to use: I want service S to work, I check the box
> for service S if it's one of the common ones, or pick service S from the
> full /etc/services list if it's an uncommon one, or enter its port manually
> if it's some nonstandard service listening on an arbitrary port. I don't see
> how the UI can be any simpler.

It can't be simpler, and that's the problem. There's no amount of lipstick that
will make this UI palatable to the developers and users we want to attract to
Fedora Workstation.

So the way we make it simpler is by making it unnecessary.

> firewall-config is only complicated because firewalld is overly complex.
> 
>         Kevin Kofler
> 
> --
> devel mailing list
> devel at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/devel
> Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct


More information about the devel mailing list