Bug 1395348 - Patching firewalld with RHEL7.3 shows error ifcfg_set_zone_of_interface on restart
Summary: Patching firewalld with RHEL7.3 shows error ifcfg_set_zone_of_interface on re...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: firewalld
Version: 7.4
Hardware: All
OS: All
high
high
Target Milestone: rc
: ---
Assignee: Thomas Woerner
QA Contact: Tomas Dolezal
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-11-15 17:59 UTC by Rupesh Patel
Modified: 2020-09-10 09:57 UTC (History)
8 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2017-08-01 16:22:56 UTC
Target Upstream Version:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Knowledge Base (Solution) 2981091 0 None None None 2017-03-24 21:13:16 UTC
Red Hat Product Errata RHBA-2017:1934 0 normal SHIPPED_LIVE firewalld bug fix and enhancement update 2017-08-01 17:55:15 UTC

Description Rupesh Patel 2016-11-15 17:59:24 UTC
After patching to RHEL 7.3 firewalld restart generates unsupported format character error. The errors should not be there (no error in RHEL 7.2)
Error output:
Nov 11 16:32:03 brppemail01 firewalld: ERROR: Calling post func <function ifcfg_set_zone_of_interface at 0x25067d0>(('internal', 'ens192')) failed: unsupported format character ':' (0x3a) at index 1
Nov 11 16:32:03 brppemail01 firewalld: ERROR: Calling post func <function ifcfg_set_zone_of_interface at 0x25067d0>(('public', 'ens224')) failed: unsupported format character ':' (0x3a) at index 1

[root@dhcp2-62 ]# cat etc/redhat-release 
Red Hat Enterprise Linux Server release 7.3 (Maipo)
[root@dhcp2-62 ]# 
[root@dhcp2-62 ]# cat installed-rpms | grep firewalld
firewalld-0.4.3.2-8.el7.noarch                              Fri Nov 11 15:25:34 2016
firewalld-filesystem-0.4.3.2-8.el7.noarch                   Fri Nov 11 15:24:27 2016
[root@dhcp2-62 ]# 

[root@dhcp2-62 ]# cat uname 
Linux brppemail01 3.10.0-327.13.1.el7.x86_64 #1 SMP Mon Feb 29 13:22:02 EST 2016 x86_64 x86_64 x86_64 GNU/Linux
[root@dhcp2-62 ]# 

[root@dhcp2-62 ]# cat etc/sysconfig/network-scripts/ifcfg-ens192 
TYPE=Ethernet
BOOTPROTO=static
IPV4_FAILURE_FATAL=yes
NAME=ens192
UUID=c9accfb0-f422-463a-9857-5a24f08ee486
DEVICE=ens192
ONBOOT=yes
#DNS1="192.168.18.155"
IPADDR=192.168.161.22
PREFIX="24"
ZONE=internal

check_link_down() {
 return 1;
}
[root@dhcp2-62 ]# cat etc/sysconfig/network-scripts/ifcfg-ens224 
TYPE="Ethernet"
BOOTPROTO="static"
DEFROUTE="yes"
IPV4_FAILURE_FATAL="yes"
IPV6INIT="yes"
#IPV6_AUTOCONF="yes"
#IPV6_DEFROUTE="yes"
#IPV6_FAILURE_FATAL="no"
NAME="ens224"
UUID="c9accfb0-f422-463a-9857-5a24f08ee486"
DEVICE="ens224"
ONBOOT="yes"
#DNS1="192.168.18.155"
IPADDR="10.118.38.136"
PREFIX="24"
GATEWAY="10.118.38.129"
IPV6ADDR="2607:f798:f:e0d::7/64"
IPV6_DEFAULTGW="2607:f798:f:e0d::1"
#IPV6_PEERDNS="yes"
#IPV6_PEERROUTES="yes"
#IPV6_PRIVACY="no"
[root@dhcp2-62 ]#

Comment 3 Thomas Woerner 2016-11-30 18:40:42 UTC
Here is the upstream patch:

https://github.com/t-woerner/firewalld/commit/17a9f40a92064aec463c1ee8cf60d7579cd35853

Please ignore comment 2.

Comment 4 Thomas Woerner 2016-11-30 20:17:40 UTC
Additional upstream patch to make quoted values work:

https://github.com/t-woerner/firewalld/commit/917d21771a4af691b1d178b2a9938e7ac03c8087

Comment 12 Lubriady Oktana 2017-06-15 02:39:43 UTC
(In reply to Thomas Woerner from comment #3)
> Here is the upstream patch:
> 
> https://github.com/t-woerner/firewalld/commit/
> 17a9f40a92064aec463c1ee8cf60d7579cd35853
> 
> Please ignore comment 2.

This problem solved for me. Thanks.

Comment 13 Lubriady Oktana 2017-06-15 02:41:35 UTC
(In reply to Thomas Woerner from comment #3)
> Here is the upstream patch:
> 
> https://github.com/t-woerner/firewalld/commit/
> 17a9f40a92064aec463c1ee8cf60d7579cd35853
> 
> Please ignore comment 2.

This problem solved for me. Thanks.

Comment 14 errata-xmlrpc 2017-08-01 16:22:56 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2017:1934


Note You need to log in before you can comment on or make changes to this bug.