firewalld-formula

History

Michal Hrusecky 8d0172f5c7

feat(zone.xml): allow more services definition inside zone

Now multiple sections ending with `services` can be defined for each in pillar
and all of them will get merged into one service block in the zone. The goal is
to keep backward compatibility while allowing different services to be defined
in different pillars. So basically have various parts of the pillar affecting
the firewall without need to define everything centrally. Helpful for the
exceptions to the rules.

2020-02-11 15:29:11 +01:00

files

feat(zone.xml): allow more services definition inside zone

2020-02-11 15:29:11 +01:00

backend.sls

Refactor backend format, add backward compatibility, simple pkg testing

2018-08-25 19:00:11 -03:00

config.sls

Default file permission for firewalld.conf is 644 not 640 (CentOS). Even if I think that "others" don't need to read that, it always shows up as file with non-default permissions from default rpm package in security scans. e.g. "rpm -Va |grep ^.M" or more salty way: "salt '*' pkg.verify" / salt '*' pkg.modified firewalld mode=True; manual fix e.g. rpm --setperms firewalld-*.el7.noarch

2017-12-28 02:45:05 +01:00

defaults.yaml

fix(yamllint): fix all errors