|
 |
e9ad3f |
From 87ecae78c07da6db1faa18504b06345ab3ba51a0 Mon Sep 17 00:00:00 2001
|
|
|
66253d |
From: Eric Garver <e@erig.me>
|
|
|
66253d |
Date: Mon, 9 Jul 2018 11:29:33 -0400
|
|
|
e9ad3f |
Subject: [PATCH 01/22] RHEL only: Add cockpit by default to some zones
|
|
|
66253d |
|
|
|
66253d |
Fixes: #1581578
|
|
|
66253d |
---
|
|
|
e9ad3f |
config/zones/home.xml | 1 +
|
|
|
e9ad3f |
config/zones/internal.xml | 1 +
|
|
|
e9ad3f |
config/zones/public.xml | 1 +
|
|
|
e9ad3f |
config/zones/work.xml | 1 +
|
|
|
e9ad3f |
src/tests/functions.at | 19 +++++++++++++++++++
|
|
|
e9ad3f |
5 files changed, 23 insertions(+)
|
|
|
66253d |
|
|
|
66253d |
diff --git a/config/zones/home.xml b/config/zones/home.xml
|
|
|
66253d |
index 42b29b2f2d50..8aa8afa0e8aa 100644
|
|
|
66253d |
--- a/config/zones/home.xml
|
|
|
66253d |
+++ b/config/zones/home.xml
|
|
|
66253d |
@@ -6,4 +6,5 @@
|
|
|
66253d |
<service name="mdns"/>
|
|
|
66253d |
<service name="samba-client"/>
|
|
|
66253d |
<service name="dhcpv6-client"/>
|
|
|
66253d |
+ <service name="cockpit"/>
|
|
|
66253d |
</zone>
|
|
|
66253d |
diff --git a/config/zones/internal.xml b/config/zones/internal.xml
|
|
|
66253d |
index e646b48c94e8..40cb7e14424b 100644
|
|
|
66253d |
--- a/config/zones/internal.xml
|
|
|
66253d |
+++ b/config/zones/internal.xml
|
|
|
66253d |
@@ -6,4 +6,5 @@
|
|
|
66253d |
<service name="mdns"/>
|
|
|
66253d |
<service name="samba-client"/>
|
|
|
66253d |
<service name="dhcpv6-client"/>
|
|
|
66253d |
+ <service name="cockpit"/>
|
|
|
66253d |
</zone>
|
|
|
66253d |
diff --git a/config/zones/public.xml b/config/zones/public.xml
|
|
|
66253d |
index 49795d8c9068..617e131a4895 100644
|
|
|
66253d |
--- a/config/zones/public.xml
|
|
|
66253d |
+++ b/config/zones/public.xml
|
|
|
66253d |
@@ -4,4 +4,5 @@
|
|
|
66253d |
<description>For use in public areas. You do not trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
|
|
|
66253d |
<service name="ssh"/>
|
|
|
66253d |
<service name="dhcpv6-client"/>
|
|
|
66253d |
+ <service name="cockpit"/>
|
|
|
66253d |
</zone>
|
|
|
66253d |
diff --git a/config/zones/work.xml b/config/zones/work.xml
|
|
|
66253d |
index 6ea5550a40bd..9609ee6f65c2 100644
|
|
|
66253d |
--- a/config/zones/work.xml
|
|
|
66253d |
+++ b/config/zones/work.xml
|
|
|
66253d |
@@ -4,4 +4,5 @@
|
|
|
66253d |
<description>For use in work areas. You mostly trust the other computers on networks to not harm your computer. Only selected incoming connections are accepted.</description>
|
|
|
66253d |
<service name="ssh"/>
|
|
|
66253d |
<service name="dhcpv6-client"/>
|
|
|
66253d |
+ <service name="cockpit"/>
|
|
|
66253d |
</zone>
|
|
|
e9ad3f |
diff --git a/src/tests/functions.at b/src/tests/functions.at
|
|
|
e9ad3f |
index 582fdcc19314..6b1263b178dc 100644
|
|
|
e9ad3f |
--- a/src/tests/functions.at
|
|
|
e9ad3f |
+++ b/src/tests/functions.at
|
|
|
e9ad3f |
@@ -105,6 +105,13 @@ m4_define([FWD_START_TEST], [
|
|
|
e67a06 |
|
|
|
e9ad3f |
m4_ifdef([TESTING_FIREWALL_OFFLINE_CMD], [
|
|
|
e9ad3f |
AT_KEYWORDS(offline)
|
|
|
e9ad3f |
+ dnl cockpit is added by default downstream, but upstream tests don't expect
|
|
|
e9ad3f |
+ dnl it. Simply remove it at the start of every test.
|
|
|
e9ad3f |
+ dnl
|
|
|
e9ad3f |
+ FWD_OFFLINE_CHECK([--zone home --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_OFFLINE_CHECK([--zone internal --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_OFFLINE_CHECK([--zone public --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_OFFLINE_CHECK([--zone work --remove-service-from-zone cockpit], 0, [ignore])
|
|
|
e9ad3f |
], [
|
|
|
e9ad3f |
m4_define_default([FIREWALL_BACKEND], [nftables])
|
|
|
e67a06 |
|
|
|
e9ad3f |
@@ -226,6 +233,18 @@ m4_define([FWD_START_TEST], [
|
|
|
e9ad3f |
])
|
|
|
e67a06 |
|
|
|
e9ad3f |
FWD_START_FIREWALLD
|
|
|
e9ad3f |
+
|
|
|
e9ad3f |
+ dnl cockpit is added by default downstream, but upstream tests don't expect
|
|
|
e9ad3f |
+ dnl it. Simply remove it at the start of every test.
|
|
|
e9ad3f |
+ dnl
|
|
|
e9ad3f |
+ FWD_CHECK([--permanent --zone home --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_CHECK([ --zone home --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_CHECK([--permanent --zone internal --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_CHECK([ --zone internal --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_CHECK([--permanent --zone public --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_CHECK([ --zone public --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_CHECK([--permanent --zone work --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
+ FWD_CHECK([ --zone work --remove-service cockpit], 0, [ignore])
|
|
|
e9ad3f |
])
|
|
|
66253d |
])
|
|
|
66253d |
|
|
|
66253d |
--
|
|
|
e9ad3f |
2.27.0
|
|
|
66253d |
|