Bug 994144

Summary:	rich rules are ignored on trusted zone
Product:	Red Hat Enterprise Linux 7	Reporter:	Tomas Dolezal <todoleza>
Component:	firewalld	Assignee:	Thomas Woerner <twoerner>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Tomas Dolezal <todoleza>
Severity:	high	Docs Contact:
Priority:	unspecified
Version:	7.0	CC:	twoerner
Target Milestone:	rc
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	994146 (view as bug list)		Environment:
Last Closed:	2014-06-13 11:41:02 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	994146
Bug Blocks:	980210

Description Tomas Dolezal 2013-08-06 14:59:04 UTC

Description of problem:
rich rules are ignored on trusted and other former immutable zones

Version-Release number of selected component (if applicable):
firewalld-0.3.4-1

How reproducible:
always

Steps to Reproduce:
1. firewall-cmd --list-all

Actual results #1:
trusted (default, active)
  interfaces: eth0
...
  rich rules: 
	rule service name="http" log level="info"

Actual results #2:
block (default, active)
  interfaces: eth0
  services: http bacula-client bacula
...
  rich rules: 
	rule service name="http" log level="info"

Expected results:
rich rules are working
or "add" command does not print "success" on its exit

Additional info:

Comment 2 Thomas Woerner 2013-10-23 17:27:55 UTC

Fixed in GIT with these commits:

https://git.fedorahosted.org/cgit/firewalld.git/commit/?id=cdf37e374ccba0e8ad6e19153f4e3bebe0ab5794
https://git.fedorahosted.org/cgit/firewalld.git/commit/?id=791f7ed973939548e235784209f98a268ed8663b
https://git.fedorahosted.org/cgit/firewalld.git/commit/?id=9834943297aa24551fb50bcadc7da5ec6e046883

Comment 5 Tomas Dolezal 2014-01-28 15:22:42 UTC

VERIFIED firewalld-0.3.9-3.el7.noarch

external requests are now processed by rich rule
>rule service name="http" log level="info"

Comment 7 Ludek Smid 2014-06-13 11:41:02 UTC

This request was resolved in Red Hat Enterprise Linux 7.0.

Contact your manager or support representative in case you have further questions about the request.