Bug 1395348

Summary: Patching firewalld with RHEL7.3 shows error ifcfg_set_zone_of_interface on restart
Product: Red Hat Enterprise Linux 7 Reporter: Rupesh Patel <rupatel>
Component: firewalldAssignee: Thomas Woerner <twoerner>
Status: CLOSED ERRATA QA Contact: Tomas Dolezal <todoleza>
Severity: high Docs Contact:
Priority: high    
Version: 7.4CC: ajohn, hasuzuki, lubryady, mabrown, mmilgram, sferguso, todoleza, ykawada
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-08-01 16:22:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Rupesh Patel 2016-11-15 17:59:24 UTC
After patching to RHEL 7.3 firewalld restart generates unsupported format character error. The errors should not be there (no error in RHEL 7.2)
Error output:
Nov 11 16:32:03 brppemail01 firewalld: ERROR: Calling post func <function ifcfg_set_zone_of_interface at 0x25067d0>(('internal', 'ens192')) failed: unsupported format character ':' (0x3a) at index 1
Nov 11 16:32:03 brppemail01 firewalld: ERROR: Calling post func <function ifcfg_set_zone_of_interface at 0x25067d0>(('public', 'ens224')) failed: unsupported format character ':' (0x3a) at index 1

[root@dhcp2-62 ]# cat etc/redhat-release 
Red Hat Enterprise Linux Server release 7.3 (Maipo)
[root@dhcp2-62 ]# 
[root@dhcp2-62 ]# cat installed-rpms | grep firewalld
firewalld-0.4.3.2-8.el7.noarch                              Fri Nov 11 15:25:34 2016
firewalld-filesystem-0.4.3.2-8.el7.noarch                   Fri Nov 11 15:24:27 2016
[root@dhcp2-62 ]# 

[root@dhcp2-62 ]# cat uname 
Linux brppemail01 3.10.0-327.13.1.el7.x86_64 #1 SMP Mon Feb 29 13:22:02 EST 2016 x86_64 x86_64 x86_64 GNU/Linux
[root@dhcp2-62 ]# 

[root@dhcp2-62 ]# cat etc/sysconfig/network-scripts/ifcfg-ens192 
TYPE=Ethernet
BOOTPROTO=static
IPV4_FAILURE_FATAL=yes
NAME=ens192
UUID=c9accfb0-f422-463a-9857-5a24f08ee486
DEVICE=ens192
ONBOOT=yes
#DNS1="192.168.18.155"
IPADDR=192.168.161.22
PREFIX="24"
ZONE=internal

check_link_down() {
 return 1;
}
[root@dhcp2-62 ]# cat etc/sysconfig/network-scripts/ifcfg-ens224 
TYPE="Ethernet"
BOOTPROTO="static"
DEFROUTE="yes"
IPV4_FAILURE_FATAL="yes"
IPV6INIT="yes"
#IPV6_AUTOCONF="yes"
#IPV6_DEFROUTE="yes"
#IPV6_FAILURE_FATAL="no"
NAME="ens224"
UUID="c9accfb0-f422-463a-9857-5a24f08ee486"
DEVICE="ens224"
ONBOOT="yes"
#DNS1="192.168.18.155"
IPADDR="10.118.38.136"
PREFIX="24"
GATEWAY="10.118.38.129"
IPV6ADDR="2607:f798:f:e0d::7/64"
IPV6_DEFAULTGW="2607:f798:f:e0d::1"
#IPV6_PEERDNS="yes"
#IPV6_PEERROUTES="yes"
#IPV6_PRIVACY="no"
[root@dhcp2-62 ]#

Comment 3 Thomas Woerner 2016-11-30 18:40:42 UTC
Here is the upstream patch:

https://github.com/t-woerner/firewalld/commit/17a9f40a92064aec463c1ee8cf60d7579cd35853

Please ignore comment 2.

Comment 4 Thomas Woerner 2016-11-30 20:17:40 UTC
Additional upstream patch to make quoted values work:

https://github.com/t-woerner/firewalld/commit/917d21771a4af691b1d178b2a9938e7ac03c8087

Comment 12 Lubriady Oktana 2017-06-15 02:39:43 UTC
(In reply to Thomas Woerner from comment #3)
> Here is the upstream patch:
> 
> https://github.com/t-woerner/firewalld/commit/
> 17a9f40a92064aec463c1ee8cf60d7579cd35853
> 
> Please ignore comment 2.

This problem solved for me. Thanks.

Comment 13 Lubriady Oktana 2017-06-15 02:41:35 UTC
(In reply to Thomas Woerner from comment #3)
> Here is the upstream patch:
> 
> https://github.com/t-woerner/firewalld/commit/
> 17a9f40a92064aec463c1ee8cf60d7579cd35853
> 
> Please ignore comment 2.

This problem solved for me. Thanks.

Comment 14 errata-xmlrpc 2017-08-01 16:22:56 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:1934