Bug 844436 - Moved kernel modules to kernel-modules-extra leads to Shorewall failure
Summary: Moved kernel modules to kernel-modules-extra leads to Shorewall failure
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: kernel
Version: 17
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Kernel Maintainer List
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-07-30 15:42 UTC by Eduard Kohler
Modified: 2012-10-08 15:16 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2012-10-08 15:16:08 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Eduard Kohler 2012-07-30 15:42:08 UTC
Description of problem:

Shorewall fails when applying traffic control rules with the following error:
RTNETLINK answers: No such file or directory
This is due to some missing kernel modules that have been moved to kernel-modules-extra package. After Shorewall failure, the system network connectivity is correctly (in my opinion) blocked. Of course, for a network only device is not acceptable.

How reproducible:
Always

Steps to Reproduce:
1. Yum upgrade a working F16 device with a boot generated firewall by Shorewall to F17
2. Reboot
3. Enjoy remote brick

Actual results:
No network connectivity.

Expected results:
Working device.

Additional info:

Modules used by Shorewall that have moved to kernel-modules-extra:
# find /usr/share/shorewall/* -type f -exec grep 'loadmodule ' \{} \; | awk '{print $2}' | sort -u > shorewall.txt
# rpm -ql kernel-modules-extra | egrep -e '\.ko' | xargs -l basename | awk -F"." '{print $1}' >> shorewall.txt
# sort shorewall.txt | uniq -d

Result :

sch_hfsc
sch_ingress
sch_prio
sch_sfq
sch_tbf

Comment 1 Josh Boyer 2012-07-31 12:07:00 UTC
(In reply to comment #0)
> sch_hfsc
> sch_ingress
> sch_prio
> sch_sfq
> sch_tbf

These should be back in the main kernel package in tomorrow's rawhide and in the  next F17 kernel build.

Comment 2 Eduard Kohler 2012-08-03 09:21:42 UTC
If the next kernel package for f17 is:

kernel-3.5.0-2.fc17 
http://koji.fedoraproject.org/koji/buildinfo?buildID=344970

then these modules still available only into the kernel-modules-extra package.

Comment 3 Josh Boyer 2012-08-03 12:19:54 UTC
(In reply to comment #2)
> If the next kernel package for f17 is:
> 
> kernel-3.5.0-2.fc17 

Nope.  I said the next kernel build.  It hasn't been built yet.  Bodhi will leave a comment here when it's available.

Comment 4 Josh Boyer 2012-10-08 15:16:08 UTC
This was fixed in 3.5.0-4 (and newer).


Note You need to log in before you can comment on or make changes to this bug.