Bug 799510

Summary: Big dump of apparently critical errors when installing and activing firewalld
Product: [Fedora] Fedora Reporter: Adam Williamson <awilliam>
Component: firewalldAssignee: Thomas Woerner <twoerner>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 17CC: jpopelka, twoerner
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: firewalld-0.2.4-1.fc17 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-03-21 19:05:42 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Adam Williamson 2012-03-02 20:27:23 UTC 
I just did 'yum install firewalld' followed by 'systemctl enable firewalld.service' and 'systemctl start firewalld.service' on my main system (originally installed as f15 or f16 and constantly upgraded to current f17).

I see a fairly big dump of errors in /var/log/messages, and GNOME's printer config tool claims firewalld isn't running when I try to add a new printer.

Mar  2 12:20:16 adam firewalld[15113]: import gobject._gobject
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/echo-request.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/destination-unreachable.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/parameter-problem.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/redirect.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/router-advertisement.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/time-exceeded.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/router-solicitation.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/echo-reply.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load icmptype file '/etc/firewalld/icmptypes/source-quench.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 FATAL ERROR: No icmptypes found.
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/smtp.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/samba-client.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/amanda-client.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/tftp-client.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/libvirt-tls.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/dns.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/bacula-client.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/telnet.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/ipp-client.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/https.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/mdns.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/nfs.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/http.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/libvirt.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/tftp.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/samba.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/radius.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/ssh.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/imaps.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/ipsec.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/ipp.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/openvpn.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/pop3s.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/cluster-suite.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/ftp.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load service file '/etc/firewalld/services/bacula.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 FATAL ERROR: No services found.
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/drop.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/home.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/internal.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/block.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/external.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/public.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/dmz.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/work.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Failed to load zone file '/etc/firewalld/zones/trusted.xml':
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 FATAL ERROR: No zones found.
Mar  2 12:20:16 adam firewalld: 2012-03-02 12:20:16 ERROR: Default zone 'public' is not valid. Using 'block'.

There is a running firewalld process, but those errors and the GNOME problem seem suspicious.
Comment 1 Thomas Woerner 2012-03-02 20:50:15 UTC 
This is a result of the PyXML package. The sax parsers of PyXML are overloading the sax parsers of python. The sax parsers in python and PyXML are not fully compatible.

There will be a firewalld package soon, which will support also PyXML sax parsers.
Comment 2 Thomas Woerner 2012-03-02 20:52:33 UTC 
The GNOME's printer config tool will also get a small fix to be able to use the firewalld interface version 1. It currently only supports the interface of the tech preview.
Comment 3 Fedora Update System 2012-03-06 13:38:25 UTC 
firewalld-0.2.2-1.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/firewalld-0.2.2-1.fc17
Comment 4 Fedora Update System 2012-03-07 07:22:51 UTC 
Package firewalld-0.2.2-1.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing firewalld-0.2.2-1.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-3194/firewalld-0.2.2-1.fc17
then log in and leave karma (feedback).
Comment 5 Fedora Update System 2012-03-15 21:44:49 UTC 
firewalld-0.2.3-1.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/firewalld-0.2.3-1.fc17
Comment 6 Fedora Update System 2012-03-16 15:49:18 UTC 
firewalld-0.2.4-1.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/firewalld-0.2.4-1.fc17
Comment 7 Fedora Update System 2012-03-21 19:05:42 UTC 
firewalld-0.2.4-1.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.