| Summary: | firewall-cmd --reload should trigger NetworkManager to update the default zone | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Stephen Gallagher <sgallagh> | ||||||
| Component: | firewalld | Assignee: | Thomas Woerner <twoerner> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
| Severity: | low | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 17 | CC: | jpopelka, twoerner | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | All | ||||||||
| OS: | Linux | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | firewalld-0.2.5-1.fc17 | Doc Type: | Bug Fix | ||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2012-04-24 04:26:11 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Attachments: |
|
||||||||
|
Description
Stephen Gallagher
2012-03-19 20:16:30 UTC
Good point, thanks. However I don't think we need to inform NM about this change because for NM nothing changes. NM only tracks that an interface is in "default" zone but doesn't care which zone is this "default", see 'nmcli -f NAME,ZONE con status'. I think firewalld itself should take care of this, i.e. when it is reloaded it should should change the zone the interface belongs to if it has been the default one. Created attachment 575187 [details] update interfaces in default zone after reload (In reply to comment #1) > I think firewalld itself should take care of this, i.e. when it is reloaded it > should change the zone the interface belongs to if it has been the > default one. With this patch if the default zone changes, the interfaces from old default zone are moved to the new one. It's not perfect (see the comment inside), but I've had no other idea so far. Created attachment 576536 [details] update interfaces in default zone after reload (In reply to comment #2) > With this patch if the default zone changes, the interfaces from old default > zone are moved to the new one. It's not perfect (see the comment inside), but > I've had no other idea so far. This one seems to be OK. Fixed upstream: http://git.fedorahosted.org/git/?p=firewalld.git;a=commitdiff;h=8d9af943cf227a6bbff996ba44654077e719b9ad firewalld-0.2.5-1.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/firewalld-0.2.5-1.fc17 Package firewalld-0.2.5-1.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing firewalld-0.2.5-1.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-6323/firewalld-0.2.5-1.fc17 then log in and leave karma (feedback). firewalld-0.2.5-1.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report. |