Bug 1374123

Summary:	Unable to determine where the default firewall configs are stored
Product:	Red Hat Enterprise Linux 7	Reporter:	Jim Wildman <jwildman>
Component:	firewalld	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED INSUFFICIENT_DATA	QA Contact:	qe-baseos-daemons
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.2	CC:	jwildman, todoleza
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-11-30 16:37:56 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Jim Wildman 2016-09-08 02:55:58 UTC

Description of problem:
A basic installation of RHEL 7 with firewalld enabled has a complete firewall.  man firewalld indicates that the default configs are stored in /usr/lib/firewalld/*.  However inspection of those files reveals them to be definitions of the zones and services w/o the actual rules.  In particular I am looking for the icmpv6 rules.

The man page indicates I should copy the files from /usr/lib/firewalld into /etc/firewalld and modify them.  Since the defaults don't contain the rule I want to remove, I'm not sure how to proceed.


Version-Release number of selected component (if applicable):
firewalld-0.3.9-14.el7.noarch

How reproducible:
Build a box, check the firewall, try to find the defaults.


Expected results:
Accurate documentation....

Additional info:

Comment 2 Thomas Woerner 2016-09-30 12:04:52 UTC

Which rule exactly do you want to remove?

Comment 3 Thomas Woerner 2016-11-30 16:37:56 UTC

Closing as insufficient data due to long user inactivity.

Comment 4 Jim Wildman 2017-01-04 21:03:12 UTC

Sorry I didn't see the note.  I was looking for the IPV6 ICMP block rules.

Comment 5 Thomas Woerner 2017-01-05 13:08:59 UTC

There is no file that contains the rule set of firewalld. The rule set is created using the configuration of the used zones, services, direct rules etc. while firewalld starts. Are you asking about this or something else?

Comment 6 Jim Wildman 2017-03-22 14:18:39 UTC

I was asking how to modify those defaults (sorry for delay)