2014-04-15 15:59 GMT+02:00 Michael Catanzaro <mcatanz...@gnome.org>:
> On Tue, 2014-04-15 at 14:35 +0200, Zbigniew Jędrzejewski-Szmek wrote:
> > What needs to be done to improve the firewall integration?
> >
> > Zbyszek
>
> The rule in the Workstation technical spec is: "A firewall in its
> default configuration may not interfere with the normal operation of
> programs installed by default." [1] There's a discussion on the desktop
> list beginning at [2] that has some brainstorming and explanation as to
> why this would be hard.
>
> [1]
> https://fedoraproject.org/wiki/Workstation/Technical_Specification#Firewall
>
> [2]
> https://lists.fedoraproject.org/pipermail/desktop/2014-February/009142.html
>
For the benefit of keeping everything on this list:
AFAICS this discussion basically says "applications can't depend on
firewalld, therefore they can't use firewalld APIs, therefore they wouldn't
know whether the firewall restircts them, therefore firewalld must be
removed".
The only given reason why the applications can't depend on firewalld is
vague claims that the D-Bus API is somehow unusable, which is clearly false
because firewall-cmd is using exactly the same API.
Mirek
--
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
