From Fedora Project Wiki

Fedora Test Days
FirewallD

Date 2012-12-12
Time all day

Website QA/Fedora_18_test_days
IRC #fedora-test-day (webirc)
Mailing list test


Can't make the date?
If you come to this page before or after the test day is completed, your testing is still valuable, and you can use the information on this page to test, file any bugs you find at Bugzilla, and add your results to the results section. If this page is more than a month old when you arrive here, please check the current schedule and see if a similar but more recent Test Day is planned or has already happened.

What to test?[edit]

Today's installment of Fedora Test Day will focus on FirewallD

Who's available[edit]

The following cast of characters will be available (all in Central European Time zone) testing, workarounds, bug fixes, and general discussion ...

Prerequisite for Test Day[edit]

1. * Installed Fedora 18 Beta with latest updates. It is possible to convert the LiveCD into LiveUSB by following the How_to_create_and_use_Live_USB instructions.

Make sure you have all current updates (and temporal fixes) installed by:

# yum update

Clear your audit log (especially important in case you aren't running from the live medium):

# echo -n > /var/log/audit/audit.log

2. Packages firewalld, firewall-config (Test case 5) and firewall-applet (Test case 6) installed.

# yum install firewalld firewall-config firewall-applet 

3. Disable and stop iptables, ip6tables and ebtables services:

 systemctl disable iptables.service
 systemctl stop iptables.service
 systemctl disable ip6tables.service
 systemctl stop ip6tables.service
 systemctl disable ebtables.service
 systemctl stop ebtables.service

4. Make sure that the services are not running anymore

 systemctl status iptables.service
 systemctl status ip6tables.service
 systemctl status ebtables.service

Test Cases[edit]

Optional Tests[edit]

Test Results[edit]

If you have problems with any of the tests, report a bug to Bugzilla. For instance file a bug report against the component firewalld if you have problems testing firewlld. If you are unsure about exactly how to file the report or what other information to include, just ask on IRC and we will help you. Once you have completed the tests, add your results to the Results table below, following the example results from the first line as a template. The first column should be your name with a link to your User page in the Wiki if you have one, and the second should be a link to the Smolt profile of the system you tested. For each test case, use the result template to enter your result, as shown in the example result line.

Test Matrix[edit]

User Firewalld usable and active FirewallD and NetworkManager Persistent changes of firewall zones Runtime changes of firewall zones firewall-config firewall-applet system-config-printer selinux-AVCs References
Sample User
Pass pass
none
Pass pass
Warning warn
[1]
none
none
Fail fail
[2]
Unknown unknown
  1. Test 3.1 failed RHBZ #54321 (firewall-cmd --list-all failed with an error)
  2. RHBZ #12345
Luya Tshimbalanga
Pass pass
Inprogress inprogress
Inprogress inprogress
Inprogress inprogress
none
none
none
none
Petr Sklenar
Pass pass
Warning warn
[1]
Warning warn
[2]
Pass pass
Pass pass
Warning warn
[3]
none
none
  1. warn/error in the /var/log/mesasge RHBZ #886432
  2. RHBZ #886459 RHBZ #886461
  3. RHBZ #886531 RHBZ #886551
Martin Krizek
Pass pass
none
Pass pass
Pass pass
Pass pass
Pass pass
none
Pass pass
Scotty
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Warning warn
[1]
Pass pass
Pass pass
  1. not properly shown devices in applet RHBZ #886534 RHBZ #886534 RHBZ #886542
User:kvolny
Warning warn
[1]
Pass pass
[2]
Pass pass
Pass pass
Fail fail
[3]
Warning warn
[long 1]
Fail fail [4]
Pass pass
  1. RHBZ #886477 RHBZ #886481 RHBZ #886484
  2. sometimes it takes tenths of seconds for the change via kde-plasma-networkmanagement to be applied
  3. the session got oom-killed RHBZ #887302
  4. RHBZ #887338
User:mvadkert
none
none
none
none
none
none
none
none
User:ebenes
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Warning warn
[long 2]
Pass pass
Pass pass
Jan Sedlak
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Jiri Pospisil
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Pass pass
Warning warn [1]
Pass pass
  1. RHBZ #886616
Ladislav Jozsa
Pass pass
none
none
none
none
none
none
none
Aleksandar Kostadinov
Pass pass
Fail fail [1]
Pass pass
Fail fail [2]
Pass pass
Pass pass
Warning warn [3]
Pass pass
  1. RHBZ #886518
  2. RHBZ #886515
  3. RHBZ #886560
Martin Holec
Warning warn [1]
Warning warn [2]
Warning warn [3]
Warning warn [3]
Pass pass
Pass pass
Pass pass
Pass pass
  1. RHBZ #886528
  2. RHBZ #886432
  3. 3.0 3.1 RHBZ #886515
Lukas Zachar
Pass pass
Pass pass
Warning warn [1]
Warning warn [1]
Pass pass
Pass pass
Warning warn [2]
Pass pass
  1. 1.0 1.1 RHBZ #886515
  2. RHBZ #886616
Tomas Hozza
Warning warn [1]
Pass pass
Pass pass
Pass pass
Warning warn
[2]
Warning warn [3]
Pass pass
Pass pass
  1. RHBZ #888190
  2. RHBZ #888242 RHBZ #888250
  3. RHBZ #886531

Long comments[edit]

  1. there's a broken dependency - the required pygobject3-base conflicts with older pygobject3 and yum isn't able to put pygobject on the list of packages to be updated along the installation; the other thing is that I really do not understand why clicking on a connection in *firewall*-applet brings up a configuration window which has NO firewall options but as a KDE user I'm just leaving that on GNOME people to find a logic in it ...
  2. Had to update/install to pygobject3-base-3.4.2-4.fc18, for some reason couldn't show any applet in the g-shell :) psklenar comments: RHBZ #886542

Reference[edit]