Red Hat Bugzilla – Bug 994125
cli: show time-out and distinguish time-outed rules
Last modified: 2017-09-14 13:22:42 EDT
Description of problem:
cli: be able to show how much time does have a rule left (e.g. --add-service=http --timeout=60) in a table
when displaying running configuration by --list-all, mark rules/services, with a timeout active, somehow to distinguish them among the others
Version-Release number of selected component (if applicable):
Steps to Reproduce:
setup: firewall-cmd --add-service=http --timeout $((4*60))
firewall-cmd <list timeouted>
please fix or provide information why do you think it shouldn't be fixed this way
CCed affiliated users
I think marking them with other colour or (better) asterisk sign would suffice
(In reply to Tomas Dolezal from comment #0)
> when displaying running configuration by --list-all, mark rules/services,
> with a timeout active, somehow to distinguish them among the others
Nice idea, the problem is that we don't ship such info (e.g. whether the port/service is activated only temporarily) over D-Bus. To fix it we'd have to add it there and therefore change the D-Bus interface which is IMHO not feasible at the moment.
> I think marking them with other colour or (better) asterisk sign would suffice
However using colours could be a nice feature, so with the following commit we indicate non-zero exit status with red color.
This is not possible at the moment.
We will re-think about this for the firewalld recode in C. But it will surely require a D-BUS interface change, which will not be possible.
Proposing for 7.1 to re-think about it.