This feature adds a simple configuration setting for firewalld to be able to lock down configuration changes from local applications.
- Name: Thomas Woerner
- Email: email@example.com
- Targeted release: Fedora 19
- Last updated: 2013-02-28
- Percentage of completion: 0%
Local applications are able to change the firewall configuration. With this feature the administator can lock the firewall configuration and these applications are not able to modify the firewall anymore.
The lockdown feature is the first part of user and application policies for firewalld and will be disabled by default.
Benefit to Fedora
An easy way to lock the firewall configuration for local applications.
Only needs changes in firewalld and it's components.
How To Test
Set the lock and use system-config-printer - it will try to open some ports.
The lock down settings defaults to disabled. If enabling the user can be sure that there are no configuration changes for the firewalld from local applications.
This is a simple firewalld setting, which can be enabled or dropped easily.
Fedora 19 includes the latest firewalld version that supports the firewalld lockdown feature to be able to lock the firewall configuration for local applications.