Bug 2213055 - tcpcrypt installation makes firewalld fail silently
Summary: tcpcrypt installation makes firewalld fail silently
Keywords:
Status: CLOSED DUPLICATE of bug 1502646
Alias: None
Product: Fedora
Classification: Fedora
Component: tcpcrypt
Version: 38
Hardware: x86_64
OS: Linux
unspecified
high
Target Milestone: ---
Assignee: Paul Wouters
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-06-07 01:00 UTC by Allan
Modified: 2023-07-14 17:21 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-07-14 17:21:15 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Allan 2023-06-07 01:00:37 UTC
With a fresh install of Fedora 38, I installed the group @security-lab and, not to my surprise, firewalld fails silently because of the file "/usr/lib/firewalld/services/tcpcryptd.xml".

I've seen this issue persisting across various Fedora releases, and what bugs me most is the fact that the tcpcrypt is in the group "security-lab" and ironically this makes the Firewall fail without the user noticing.

Reproducible: Always

Steps to Reproduce:
1. Install tcpcrypt (or @security-lab group)
2. Reboot the system
3. systemctl status firewalld
Actual Results:  
ERROR: Failed to load full stock configuration. This likely indicates a system level issue, the firewall backend (nftables, iptables) is broken. All hope is lost. Exiting.

systemd[1]: firewalld.service: Deactivated successfully.

Expected Results:  
Do not make firewalld fail.

This issue is known across Fedora releases.

bug 2095227 - https://bugzilla.redhat.com/show_bug.cgi?id=2095227
bug 1502646 - https://bugzilla.redhat.com/show_bug.cgi?id=1502646
bug 1716080 - https://bugzilla.redhat.com/show_bug.cgi?id=1716080

Comment 1 Adam Williamson 2023-07-14 17:21:15 UTC

*** This bug has been marked as a duplicate of bug 1502646 ***


Note You need to log in before you can comment on or make changes to this bug.