summaryrefslogtreecommitdiffstats
path: root/firewall.py
Commit message (Collapse)AuthorAgeFilesLines
* Remove test mode.Chris Lumens2009-12-031-1/+1
| | | | | | | This is yet another way of running anaconda that gets extremely limited use, no testing, and no consideration during development to making sure it still works. Again, we need to stop pretending and get rid of modes that we don't support.
* Make sure to import os.path if we are going to use it.Joel Granados Moreno2009-05-291-0/+1
|
* sysconfig file changed names for system-config-firewallJeremy Katz2009-05-271-2/+2
|
* Don't write out firewall settings if they already exist (#502479)Jeremy Katz2009-05-271-1/+1
| | | | | livecds could already have custom firewall settings, so let's not overwrite them for now
* When catching an OSError, handle it as an object instead of a tuple (#497374).Chris Lumens2009-04-231-2/+2
|
* Make sure ssh doesn't get duplicated in the open port list (#474937).Chris Lumens2008-12-111-2/+5
| | | | | | Since ssh is always opened by anaconda, it can be listed twice if the kickstart file lists ssh as an allowed port. Make sure to only add ssh to the open port list if it's not already specified by the kickstart file.
* Use --service=NAME in firewall.py when calling lokkitDavid Cantrell2008-09-061-5/+7
| | | | | | Suggested by Thomas Woerner at FUDCon Brno 2008. We should be using the --service argument when calling lokkit rather than the portlist.
* 2008-06-04 Ján ONDREJ <ondrejj@salstar.sk> (via ondrejj@fedoraproject.org)Ján ONDREJ2008-06-041-1/+3
| | | | * po/sk.po: Typo fix.
* Don't pass None as stdout or stderr.Chris Lumens2008-03-281-1/+2
|
* Clean up typos and other things for GPLv2+ changes.David Cantrell2007-12-171-2/+2
| | | | | | | Shorten 'Red Hat Author(s)' to just 'Author(s)'. Perhaps eventually we'll get an AUTHORS file and will just remove author names from the individual files. Also fixed a type in scripts/dumphdrlist.py where Author was listed twice.
* Common GPLv2+ boilerplate on toplevel python source files.David Cantrell2007-12-171-8/+14
| | | | | | Updated all *.py files to have a uniform GPL boilerplate. Expanded copyright year ranges and listed authors (if they were in the comment section) under the Red Hat Author(s) section.
* Remove unused imports. Yes I know this is stupid nitpicky crap, but I likeChris Lumens2007-09-191-2/+0
| | | | it.
* Use subprocess instead of our own code. Fix all calls to execWith* soChris Lumens2006-07-121-5/+3
| | | | | the command is no longer the first argument, since subprocess doesn't work that way. Remove unneeded /proc/e820info cruft. Remove iutil.rmrf.
* 2006-05-01 Jeremy Katz <katzj@redhat.com>Jeremy Katz2006-05-011-1/+1
| | | | | | * instdata.py (InstallData.write): It's safe to run authconfig with --nostart in rootpath mode. * firewall.py (Firewall.write): Likewise for lokkit.
* 2005-09-13 Jeremy Katz <katzj@redhat.com>Jeremy Katz2005-09-131-1/+1
| | | | | | | | * iw/network_gui.py (NetworkWindow.getNext): Don't enforce selinux/firewall here. Use the object defaults. * textw/network_text.py (NetworkGlobalWindow.__call__): Likewise. * firewall.py (Firewall.__init__): Default firewall to allow ssh.
* Use new logging system.Chris Lumens2005-08-121-4/+6
|
* Remove firewall configuration screen. This will be coming back inChris Lumens2005-07-211-36/+1
| | | | firstboot using system-config-securitylevel.
* oops, didn't mean to change the name of this varJeremy Katz2004-06-211-1/+1
|
* major simplification of the firewall code. lose the trusted devices andJeremy Katz2004-06-181-36/+44
| | | | | other ports selection. make the list of services easy to change and shared between gui and text. lose dead code, update copyrights
* always run lokkit, it does the right thing with --disabledJeremy Katz2004-03-301-24/+17
|
* force override of any installed firewall settings. fix typo tooBill Nottingham2004-03-191-1/+1
|
* add an option for selinuxbfox2004-03-121-0/+3
|
* more redhat-config -> system-configJeremy Katz2004-01-231-2/+2
|
* merge from taroon-branch. all kinds of miscellaneous bugfixes, includingJeremy Katz2003-08-141-14/+11
| | | | | | | | | * firewall update * iSeries PReP size * ppc mediacheck * tzdata stuff * cmdline mode * pkg defaults screen
* make args something that will make redhat-config-securitylevel happierJeremy Katz2003-01-231-7/+7
|
* bump up copyright for things we have changed this year so farMike Fulbright2003-01-141-1/+1
|
* opening the file to *write* is helpfulJeremy Katz2003-01-131-1/+2
|
* write out an /etc/sysconfig/redhat-config-securitylevel to make it so that ↵Jeremy Katz2003-01-131-0/+7
| | | | redhat-config-securitylevel can read the iptables settings after install (#81472)
* migrate to using rhpl log functionMike Fulbright2002-05-231-1/+2
|
* oh yeah goodbye reconfigMike Fulbright2002-02-081-1/+1
|
* allow firewall config to work in reconfig modebfox2001-08-011-1/+1
|
* make firewall screen default to what it was in 7.1bfox2001-07-061-1/+2
|
* copyrightMatt Wilson2001-06-221-0/+15
|
* merge dispatch to HEADMatt Wilson2001-06-201-0/+89