On Wednesday, August 28, 2019 10:00:35 PM MST Christopher wrote: > No, the default firewalld zone affects all Fedora Workstation users, > because firewalld runs outside of GNOME. Just because a user uses the > Workstation Edition doesn't mean they're running GNOME... you can > still run Cinnamon, XFCE, MATE, KDE, (or no graphical environment at > all) using the Workstation Edition. It's just that GNOME is the > default. So, this isn't a GNOME-specific issue. This is a Workstation > Edition issue with /etc/firewalld/firewalld.conf's DefaultZone option. How is that possible? The workstation installer installs GNOME, right? Can you select something else in those ISOs' Anaconda config? If so, why would it still pull in GNOME's firewall zone? > Funny, the FedoraServer.xml file still has a description "For use in > public areas" while FedoraWorkstation.xml does not... as if servers > are more likely than workstations to travel to "public areas" often. You know, laptops move between networks a lot more frequently than servers. The majority of those would be running GNOME spin (Workstation), KDE spin or another DE's spin. > :) I know it's because the server zone was derived from the public > zone, which has that description, but it is still amusing. That's because servers are often public facing, but so are laptops when they're on unknown networks, or even on peoples' own home networks, where we want a decent `trusted` config. > FWIW, I actually prefer the public zone on my Workstation installs... > and... it's actually the default upstream. Honestly, I'd prefer we > just stick to that across all Editions/Spins. As would I. -- John M. Harris, Jr. <johnmh@xxxxxxxxxxxxx> Splentity https://splentity.com/ _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx
