Btrfs Coming to Fedora 33

Re:Btrfs Coming to Fedora 33 by vetinari on Monday August 24, 2020 @10:27AM (#24260980)

I'm pretty sure Fedora Workstation comes with firewalld enabled:

    $ systemctl status firewalld
    ● firewalld.service - firewalld - dynamic firewall daemon
         Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)

[ Parent | on HN ]

Re:Btrfs Coming to Fedora 33 by rwmj on Monday August 24, 2020 @11:45AM (#24261727)

But with all the high ports open by default: https://lists.fedoraproject.org/archives/list/[email protected]... The justification was that blocking firewall ports breaks user applications.

[ Parent | on HN ]

Re:Btrfs Coming to Fedora 33 by vetinari on Monday August 24, 2020 @12:13PM (#24262064)

I have mixed feelings on this:

- on one hand, nothing listens on these ports by default; and they have a point that it does break user applications;

- on the other hand, they should be closed, and users should open them explicitly once they install an app that needs it. However, I'm afraid we would see exactly the same thing we see with SELinux: many tutorials about installing apps or services start with "Disable SELinux" instead of how to enable exactly what is needed. We would see the same thing with firewall and "Disable firewall" as step 1.

- as a sidenote to the second point: many apps do not ship with firewalld profile, so it is not a matter of `firewall-cmd -add-service $appname` either.

[ Parent | on HN ]