FS#64531 - [firewalld] Firewalld no longer restore permanent rules at all

Attached to Project: Community Packages
Opened by Adam (adam900710) - Saturday, 16 November 2019, 10:07 GMT
Last edited by Doug Newgard (Scimmia) - Friday, 24 January 2020, 01:19 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Maxime Gauduin (Alucryd)
Architecture All
Severity High
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description:

Firewalld no longer loads permanent rules at restart/start.
Every time firewalld get restarted or started, all permanent rules get lost.

Additional info:
* package version(s)
linux: 5.3.11.1-1
firewalld: 0.8.0-1
* config and/or log files etc.
* link to upstream bug report, if any

Steps to reproduce:
1. Set some permanent rules for your current zone.
e.g.
# firewall-cmd --add-service=ssh --zone=home --perm
2. Make sure everything is working
# firewall-cmd --info-zone=home
home (active)
target: default
icmp-block-inversion: no
interfaces: eth0
sources:
services: dhcpv6-client kdeconnect mdns samba-client ssh steam-streaming
ports: 8123/tcp 5201/tcp
...

2. Reboot firewalld service or even the system
# systemctl restart firewalld
3. Check your zone info
# firewall-cmd --info-zone=home
home (active)
target: default
icmp-block-inversion: no
interfaces: eth0
sources:
services:
ports:
protocols:
...

Strangely, firewall-cmd --reload works.
This task depends upon

Closed by  Doug Newgard (Scimmia)
Friday, 24 January 2020, 01:19 GMT
Reason for closing:  Fixed
Additional comments about closing:  Upstream
Comment by Adam (adam900710) - Saturday, 16 November 2019, 10:38 GMT
BTW, firewalld-0.7.2-2 still works as expected.

So it's a bug in latest firewalld, not kernel.
Comment by Adam (adam900710) - Friday, 24 January 2020, 00:50 GMT
The latest version, firewalld 0.8.1-1 work fine now.

I guess it's fixed upstream.

Loading...