Skip to content

Commit fd3f001

Browse files
authored
Enable iptables by default (#10597)
Default presets were introduced in PR #8028. The default firewall was firewalld which is not fully supported for Azl3. Therefore, set as iptables. - For an image upgrade, this PR will cause the iptables.service to run by default and thus, will introduce firewall rules by default. - For a package upgrade to azurelinux-release-3.0-20, the iptables service will be recognized as being allowed by the preset but will NOT be enabled by default. That being said, if an iptables.rpm upgrade comes in afterwards, the rules WILL be turned on - For a package downgrade to an older package (< azurelinux-release-3.0-20), the preset will show that the iptables service is disabled by the preset but iptables WILL continue to run even after reboot
1 parent d2f76c2 commit fd3f001

3 files changed

Lines changed: 6 additions & 3 deletions

File tree

SPECS/azurelinux-release/90-default.preset

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ enable rsyslog.*
2828
enable syslog-ng.*
2929
enable sysklogd.*
3030

31-
enable firewalld.service
31+
enable iptables.service
3232

3333
enable virtqemud.socket
3434
enable virtqemud-ro.socket

SPECS/azurelinux-release/azurelinux-release.signatures.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"Signatures": {
3-
"90-default.preset": "50ed546e79e3c9f5c4f2d4a9796255537f4900d5d1d78c0564fbe7362634531b",
3+
"90-default.preset": "073dd8a72f9ef915280bb608f5ea0b394c0d658fe0537d552135332168fadb03",
44
"90-default-user.preset": "7cf8f4d2ca1760e04ff46bd2444609cfd27a7ab456be2f9e73b0f89c284e134d",
55
"99-default-disable.preset": "3127b197b9eae62eb84eeed69b0413419612238332006183e36a3fba89578378",
66
"15-azurelinux-default.conf": "63a46ecbed4b92f996718ea9202e914ff119c2c06fdaeed3d1e2710aabc663b4"

SPECS/azurelinux-release/azurelinux-release.spec

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
Summary: Azure Linux release files
66
Name: azurelinux-release
77
Version: %{dist_version}.0
8-
Release: 19%{?dist}
8+
Release: 20%{?dist}
99
License: MIT
1010
Vendor: Microsoft Corporation
1111
Distribution: Azure Linux
@@ -118,6 +118,9 @@ install -Dm0644 %{SOURCE4} -t %{buildroot}%{_sysctldir}/
118118
%{_sysctldir}/*.conf
119119

120120
%changelog
121+
* Fri Sep 27 2024 Rachel Menge <rachelmenge@microsoft.com> - 3.0-20
122+
- Enable iptables as default firewall
123+
121124
* Wed Sep 25 2024 CBL-Mariner Servicing Account <cblmargh@microsoft.com> - 3.0-19
122125
- Bump release for October 2024 Update
123126

0 commit comments

Comments
 (0)