Bug 1156411

Summary:	add optional [seconds] argument to -w
Product:	Red Hat Enterprise Linux 7	Reporter:	Jiri Popelka <jpopelka>
Component:	iptables	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED ERRATA	QA Contact:	Tomas Dolezal <todoleza>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	iptables-maint-list, jscotka, pvrabec, todoleza
Target Milestone:	rc	Keywords:	Patch
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-11-19 12:39:08 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1151067

Description Jiri Popelka 2014-10-24 12:17:21 UTC

iptables (since 1.4.20) has a locking mechanism, which prevents multiple instances of the program from running concurrently.

With patch
https://git.netfilter.org/iptables/commit/?id=aaa4ace72ba1d195bbf436134a336816c33f7bd0

we would be able to tell (in firewalld specifically) iptables tool to wait a second (-w1) or two (-w2) when something else like libvirtd (bug #1151067) or docker (bug # 1098281) is calling iptables at the same time (for example when some virtual network device is brought up).

Comment 3 errata-xmlrpc 2015-11-19 12:39:08 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2015-2103.html