Unblock Avahi by default (for the Desktop live CDs)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



Heya,

It seems to me that Avahi would be safe to run by default. That would
allow accessing remote machines through their .local names, even if it
wouldn't solve the problem of sharing *from* the machine itself.

But it would mean we can SSH, or VNC into local area machines, and
consume data (shares, music, etc.).

Comments?
>From 98aad99907e8d75ee75388ed4a2f8b74e4f3f8ed Mon Sep 17 00:00:00 2001
From: Bastien Nocera <hadess@xxxxxxxxxx>
Date: Tue, 13 Apr 2010 17:46:04 +0100
Subject: [PATCH] Unblock Avahi itself by default

Unblocking avahi itself should be safe, as it runs as its own
user, and SELinux should stop it from doing anything stupid.
---
 fedora-live-desktop.ks |    5 +++++
 1 files changed, 5 insertions(+), 0 deletions(-)

diff --git a/fedora-live-desktop.ks b/fedora-live-desktop.ks
index edb0279..daf9c69 100644
--- a/fedora-live-desktop.ks
+++ b/fedora-live-desktop.ks
@@ -19,6 +19,11 @@ nss-mdns
 
 %end
 
+# Enable Avahi through the firewall by default
+# Note: SSH is already enabled by anaconda itself, see
+# http://fedoraproject.org/wiki/Anaconda/Kickstart
+firewall --enabled --port=mdns:ssh
+
 %post
 cat >> /etc/rc.d/init.d/livesys << EOF
 # disable screensaver locking
-- 
1.7.0.1

-- 
desktop mailing list
desktop@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/desktop

[Index of Archives]     [Fedora Users]     [Fedora KDE]     [Fedora Announce]     [Fedora Docs]     [Fedora Config]     [PAM]     [Red Hat Development]     [Red Hat 9]     [Gimp]     [Yosemite News]

  Powered by Linux