Attachment 912590 Details for Bug 1113775 – upstream patch

upstream patch

0001-Add-workstation-zone.patch (text/plain), 1.10 KB, created by Bastien Nocera on 2014-06-26 22:03:39 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bastien Nocera

Created: 2014-06-26 22:03:39 UTC

Size: 1.10 KB

patch

obsolete

>From 6271f47daa8a813df37e23a5d42e47099998b71a Mon Sep 17 00:00:00 2001
>From: Jiri Popelka <jpopelka@redhat.com>
>Date: Thu, 26 Jun 2014 23:59:20 +0200
>Subject: [PATCH] Add workstation zone
>
>For use as the default zone in Fedora Workstation
>---
> config/zones/workstation.xml | 10 ++++++++++
> 1 file changed, 10 insertions(+)
> create mode 100644 config/zones/workstation.xml
>
>diff --git a/config/zones/workstation.xml b/config/zones/workstation.xml
>new file mode 100644
>index 0000000..49a1247
>--- /dev/null
>+++ b/config/zones/workstation.xml
>@@ -0,0 +1,10 @@
>+<?xml version="1.0" encoding="utf-8"?>
>+<zone target="%%REJECT%%">
>+  <short>Workstation</short>
>+  <description>Unsolicited incoming network packets are rejected from port 1 to 1024, except for select network services. Incoming packets that are related to outgoing network connections are accepted. Outgoing network connections are allowed.</description>
>+  <service name="dhcpv6-client"/>
>+  <service name="ssh"/>
>+  <service name="samba-client"/>
>+  <port protocol="udp" port="1025-65535"/>
>+  <port protocol="tcp" port="1025-65535"/>
>+</zone>
>-- 
>1.9.3
>

Actions: View

Attachments on bug 1113775: 912590