Bug #2205

/etc/sysconfig/system-config-firewall not expanded by lokkit-save event

Added by Davide Principi almost 8 years ago. Updated almost 8 years ago.

Status:CLOSEDStart date:
Priority:NormalDue date:
Assignee:-% Done:

100%

Category:nethserver-base
Target version:v6.4-beta2
Security class: Resolution:
Affected version:v6.4-beta1 NEEDINFO:No

Description

The lokkit-save event does not expand /etc/sysconfig/system-config-firewall template. I've noticed it after installing nethserver-httpd: the port 80 is never opened.

As a workaround I typed:

   # expand-template /etc/sysconfig/system-config-firewall
   # signal-event firewall-adjust

Installed packages:

   # rpm -qa | grep ^neth
nethserver-php-1.1.0-1.ns6.noarch
nethserver-smartd-1.0.0-1.ns6.noarch
nethserver-yum-1.1.1-1.ns6.noarch
nethserver-openssh-1.0.2-2.0git450825f3.ns6.noarch
nethserver-base-1.4.1-3.0git2d71a626.ns6.noarch
nethserver-httpd-2.2.1-1.ns6.noarch
nethserver-grub-1.0.1-1.ns6.noarch
nethserver-release-6.4-beta1.noarch
nethserver-lib-1.3.1-1.ns6.noarch
nethserver-ntp-1.0.4-1.ns6.noarch
nethserver-nethgui-1.2.3-11.0git06fa2052.ns6.noarch
nethserver-httpd-admin-1.0.5-2.0git1ca852bd.ns6.noarch

Related issues

Related to NethServer 6 - Enhancement #1875: Base: implement firewall-adjust event CLOSED

Associated revisions

Revision 88b41851
Added by Giacomo Sanchietti almost 8 years ago

createlinks: expand /etc/sysconfig/system-config-firewall template on lokkit-save event. Refs #2205

Revision 38f86fc0
Added by Giacomo Sanchietti almost 8 years ago

createlinks, actions: remove nethserver-openssh-conf action. Refs #2205

History

#1 Updated by Davide Principi almost 8 years ago

The /etc/e-smith/events/actions/nethserver-openssh-conf action (from nethserver-openssh) modifies /etc/sysconfig/system-config-firewall directly, from the time where it was not a template.

It needs to be fixed.

#2 Updated by Giacomo Sanchietti almost 8 years ago

  • Assignee set to Giacomo Sanchietti

#3 Updated by Giacomo Sanchietti almost 8 years ago

  • Status changed from NEW to TRIAGED
  • % Done changed from 0 to 20

Bug and solution verified.

#4 Updated by Giacomo Sanchietti almost 8 years ago

  • Status changed from TRIAGED to ON_DEV
  • % Done changed from 20 to 30

#5 Updated by Giacomo Sanchietti almost 8 years ago

  • Status changed from ON_DEV to MODIFIED
  • % Done changed from 30 to 60

Updated nethserver-openssh and nethserver-base packages.

#6 Updated by Giacomo Sanchietti almost 8 years ago

  • Status changed from MODIFIED to ON_QA
  • % Done changed from 60 to 70
New packages in nethserver-testing:
  • nethserver-openssh-1.0.2-3.0git38f86fc0.ns6.noarch
  • nethserver-base-1.4.1-4.0git88b41851.ns6.noarch
Test case 1
  1. First update nethserver-base, then install nethserver-httpd
  2. Check http port is open
Test case 2
  1. First update nethserver-base, then install nethserver-openssh
  2. Check there's no nethserver-openssh-conf actions and ssh port is open

#7 Updated by Giacomo Sanchietti almost 8 years ago

  • Assignee deleted (Giacomo Sanchietti)

#8 Updated by Davide Principi almost 8 years ago

  • Assignee set to Davide Principi

#9 Updated by Davide Principi almost 8 years ago

  • Status changed from ON_QA to VERIFIED
  • Assignee deleted (Davide Principi)
  • % Done changed from 70 to 90

VERIFIED

Test case 1

   # yum update nethserver-base
[...]
---> Package nethserver-base.noarch 0:1.4.1-12.0gitce7f7f4e.ns6 will be an update
[...]
   # yum install nethserver-httpd

  • Port 80 is reachable from another host

Test case 2

   # yum update nethserver-base
---> Package nethserver-base.noarch 0:1.4.1-12.0gitce7f7f4e.ns6 will be an update
   # yum update nethserver-openssh
---> Package nethserver-openssh.noarch 0:1.0.2-3.0git38f86fc0.ns6 will be an update

  • nethserver-openssh-conf action is not there
  • ssh port 22 is open

#10 Updated by Giacomo Sanchietti almost 8 years ago

  • Status changed from VERIFIED to CLOSED
  • % Done changed from 90 to 100
In nethserver-updates:
  • nethserver-base-1.4.3

Also available in: Atom PDF