[jira] [Commented] (VCL-972) Add support for firewalld

["ASF subversion and git services (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/VCL-972?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16025134#comment-16025134 ] 

ASF subversion and git services commented on VCL-972:
-----------------------------------------------------

Commit 1796178 from arkurth@apache.org in branch 'vcl/trunk'
[ https://svn.apache.org/r1796178 ]

VCL-972
firewalld.pm::remove_direct_chain_rules calls 'firewall-cmd --permanent --direct --remove-rule'. This command only works if passed the exact output for a rule from 'firewall-cmd --permanent --direct --get-rules'. The output will contain single quotes under some circumstances such as if the existing rule contains a comment. There is no way I have found for the command to work if the output is altered such as replacing the single quotes with double quotes.

run_ssh_command doesn't work if the command argument contains single quotes because it encloses the argument in single quotes. There is no way to escape single quotes within a single quoted string. Instead, run_ssh_command was updated to break the argument up if it contains single quotes and enclose the single quotes in double quotes.

> Add support for firewalld
> -------------------------
>
>                 Key: VCL-972
>                 URL: https://issues.apache.org/jira/browse/VCL-972
>             Project: VCL
>          Issue Type: New Feature
>          Components: vcld (backend)
>            Reporter: Andy Kurth
>            Assignee: Andy Kurth
>             Fix For: 2.5
>
>
> The backend code currently does not have the ability to configure firewalld which is the default firewall configuration system for Red Hat 7-based distributions.  This functionality should be added.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)