Description of problem: Use of at_console="true" in the firewalld DBus policy file makes firewalld hard to use on servers, where users are logged in via ssh, or via Cockpit, but not at a console. at_console="true" is a real old relic, that was never really implemented. Modern services should be using polkit. NetworkManager moved away from it for the same reasons (want to be usable on servers): bug #979416 Version-Release number of selected component (if applicable): firewalld-0.3.9.3-1.fc20.noarch [stef@stef firewalld]$ git grep at_console config/FirewallD.conf: <policy at_console="true">
Fixeds upstream in https://git.fedorahosted.org/cgit/firewalld.git/commit/?id=449e5b97b40e3363495391bfa4ba6c4c1aebb926
firewalld-0.3.10-1.fc20 has been submitted as an update for Fedora 20. https://admin.fedoraproject.org/updates/firewalld-0.3.10-1.fc20
Package firewalld-0.3.10-1.fc20: * should fix your issue, * was pushed to the Fedora 20 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing firewalld-0.3.10-1.fc20' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2014-6834/firewalld-0.3.10-1.fc20 then log in and leave karma (feedback).
firewalld-0.3.10-1.fc20 has been pushed to the Fedora 20 stable repository. If problems still persist, please make note of it in this bug report.