[Ovirt-devel] [PATCH]: Configure iptables on the managed node

Ian Main imain at redhat.com
Thu Jul 10 04:38:21 UTC 2008


On Wed, 09 Jul 2008 17:44:27 +0200
Chris Lalancette <clalance at redhat.com> wrote:

> One of the side-effects of the SELinux support that recently went into
> livecd-tools (and is now in Fedora 9) is that it runs lokkit at the end of
> installation.  This results in the default firewall being applied to the managed
> node.  In general, this is a good thing, but we need to customize that firewall
> to allow incoming ssh and incoming libvirt, at the very least (there may be more
> in the future).  The attached patch just configures the firewall in %post, and
> with this in place I can successfully ssh into the managed node and use remote
> libvirt commands.
> 
> Signed-off-by: Chris Lalancette <clalance at redhat.com>

ACK!  Very nice :)

	Ian




More information about the ovirt-devel mailing list