Re: "Workstation" Product defaults to wide-open firewall

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 12/09/2014 11:01 AM, Christian Schaller wrote:




----- Original Message -----
From: "Gerd Hoffmann" <kraxel@xxxxxxxxxx>
To: "Development discussions related to Fedora" <devel@xxxxxxxxxxxxxxxxxxxxxxx>
Sent: Tuesday, December 9, 2014 10:22:01 AM
Subject: Re: "Workstation" Product defaults to wide-open firewall

On Di, 2014-12-09 at 08:16 -0500, Bastien Nocera wrote:

----- Original Message -----
On Tue, Dec 09, 2014 at 12:54:59PM +0100, Gerd Hoffmann wrote:
Why we can't have something like this?  And if you don't want a popup
asking, have something in the NetworkManager applet menu, where people
can easily find the switch without having to search for it?  A "[x]
allow sharing" checkbox?  A firewall zone selector?

We can — we just need someone to design and write it.

A design for something that we don't want to implement. This was one of the
options when implementing the feature, one that we didn't pursue. We chose
instead to use "user intent" as a way to do this.

If you start sharing something on a network, then we consider it safe to
share.
If you connect to a public unencrypted Wi-Fi, you won't have the option to.
If
you connect to an encrypted Wi-Fi where sharing your holiday photos isn't
acceptable
then it won't, because you didn't ask it to in the first place.

That assumes all applications behave that way.  Which simply isn't true,
there is a world outside gnome.  You apparently choose to ignore that,
which is a bad idea IMO.

Well we are not shipping by default anything which doesn't conform to this,
and if you go out of your way to install something I don't think it is far
fetched to assume you want that thing to work.

I want that thing to work for me, not for everyone on the network unless I allow it (open the firewall). External applications, specially closed source ones, with bad defaults exists and that will never stop


Christian


--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux