Closed BrennanPaciorek closed 1 year ago
Patch coverage: 100.00%
and project coverage change: +1.29%
:tada:
Comparison is base (
9c6ad37
) 53.62% compared to head (83e3f87
) 54.92%.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
[citest]
[citest]
Enhancement: firewall varable option firewalld_conf added to support modifying supported firewalld_conf arguments
Reason: Many EL releases for firewalld set
AllowZoneDrifting=yes
as the default. This feature allows those who do not want this insecure feature set to disable the feature using the role.Result: AllowZoneDrifting can be changed to whatever the role user wants to change it to, provided it is not deprecated.
Will fail if the system is using a version of firewalld where
AllowZoneDrifting
has not been implemented. This should not be an issue on EL7 since the feature seems to have been backported to those systems, and should not be an issue on systems where the feature is removed because the dbus method for modifying the directive is still present (although it does not do anything).Issue Tracker Tickets (Jira or BZ if any):