Re: Fedora Workstation and disabled by default firewall

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tuesday, August 27, 2019 4:58:15 PM MST Chris Murphy wrote:
> On Tue, Aug 27, 2019 at 5:02 PM Adam Williamson
> <adamwill@xxxxxxxxxxxxxxxxx> wrote:
> 
> >
> >
> > However, Fedora Workstation is an edition. Which means it has a
> > *policy-defined* target audience. That target audience is defined here:
> > https://fedoraproject.org/wiki/Workstation/Workstation_PRD#Target_Audience
> > 
> >
> >
> >
> > Case 1: "Engineering/CS student"
> > Case 2: "Independent Developer"
> > Case 3: "Small Company Developer"
> > Case 4: "Developer in a Large Organization"
> >
> >
> >
> > Are those people we believe do not understand the concepts associated
> > with firewalls?
> 
> 
> This is exactly what I was alluding to upthread with "developers are a
> large target audience, in particular for Workstation"
> 
> They're clearly safer with FedoraWorkstation zone (default) enabled
> than with the firewall disabled. I can't estimate how much safer.
> 
> I definitely do not want to pester developers, or make their day to
> day life difficult. If there's no satisfactory GUI right now to manage
> it, it's difficult to even experiment with different policies. The
> original firewalld proposal considered the graphical tool the main way
> of interacting with the firewall, and it was the cli tool that came
> later, yet as far as I recall, Workstation never shipped with this GUI
> tool.
> 
> 
> -- 
> Chris Murphy
> _______________________________________________
> devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List
> Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List
> Archives:
> https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx

The default zone essentially disables the firewall, without disabling it. It 
doesn't provide any real security.

I don't want to pester devs either, which is something fixing this would have 
little effect on. https://xkcd.com/1172/

There IS a satisfactory GUI to manage the firewall. If I recall correctly, 
it's literally called "firewall-gui".

-- 
John M. Harris, Jr. <johnmh@xxxxxxxxxxxxx>
Splentity
https://splentity.com/

_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx




[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Users]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]

  Powered by Linux