Bug 1374123 - Unable to determine where the default firewall configs are stored
Summary: Unable to determine where the default firewall configs are stored
Keywords:
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: firewalld
Version: 7.2
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Thomas Woerner
QA Contact: qe-baseos-daemons
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-09-08 02:55 UTC by Jim Wildman
Modified: 2017-03-22 14:18 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-11-30 16:37:56 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Jim Wildman 2016-09-08 02:55:58 UTC 
Description of problem:
A basic installation of RHEL 7 with firewalld enabled has a complete firewall.  man firewalld indicates that the default configs are stored in /usr/lib/firewalld/*.  However inspection of those files reveals them to be definitions of the zones and services w/o the actual rules.  In particular I am looking for the icmpv6 rules.

The man page indicates I should copy the files from /usr/lib/firewalld into /etc/firewalld and modify them.  Since the defaults don't contain the rule I want to remove, I'm not sure how to proceed.


Version-Release number of selected component (if applicable):
firewalld-0.3.9-14.el7.noarch

How reproducible:
Build a box, check the firewall, try to find the defaults.


Expected results:
Accurate documentation....

Additional info:
Comment 2 Thomas Woerner 2016-09-30 12:04:52 UTC 
Which rule exactly do you want to remove?
Comment 3 Thomas Woerner 2016-11-30 16:37:56 UTC 
Closing as insufficient data due to long user inactivity.
Comment 4 Jim Wildman 2017-01-04 21:03:12 UTC 
Sorry I didn't see the note.  I was looking for the IPV6 ICMP block rules.
Comment 5 Thomas Woerner 2017-01-05 13:08:59 UTC 
There is no file that contains the rule set of firewalld. The rule set is created using the configuration of the used zones, services, direct rules etc. while firewalld starts. Are you asking about this or something else?
Comment 6 Jim Wildman 2017-03-22 14:18:39 UTC 
I was asking how to modify those defaults (sorry for delay)
Note You need to log in before you can comment on or make changes to this bug.