diff options
| author | Michael Biebl <biebl@debian.org> | 2020-05-30 00:23:54 +0200 |
|---|---|---|
| committer | Michael Biebl <biebl@debian.org> | 2020-05-30 00:23:54 +0200 |
| commit | 45e8e1149027529194982212c804c0468aa01d98 (patch) | |
| tree | f3acb5e5824dd8b13f1a48bb516b0c92c5f052fd /data | |
| parent | d460892bbfece74fb6d3cd846bf6ef548290be41 (diff) | |
New upstream version 1.24.2 upstream/1.24.2
Diffstat (limited to 'data')
| -rw-r--r-- | data/meson.build | 7 | ||||
| -rw-r--r-- | data/nm-shared.xml | 23 |
2 files changed, 30 insertions, 0 deletions
diff --git a/data/meson.build b/data/meson.build index de08c91c..b713a03c 100644 --- a/data/meson.build +++ b/data/meson.build @@ -67,3 +67,10 @@ if enable_polkit install_dir: polkit_gobject_policydir, ) endif + +if enable_firewalld_zone + install_data( + 'nm-shared.xml', + install_dir: join_paths(nm_prefix, 'lib', 'firewalld', 'zones') + ) +endif diff --git a/data/nm-shared.xml b/data/nm-shared.xml new file mode 100644 index 00000000..0dea5dd6 --- /dev/null +++ b/data/nm-shared.xml @@ -0,0 +1,23 @@ +<?xml version="1.0" encoding="utf-8"?> +<zone target="ACCEPT"> + <short>NetworkManager Shared</short> + + <description> + This zone is used internally by NetworkManager when activating a + profile that uses connection sharing and doesn't have an explicit + firewall zone set. + Block all traffic to the local machine except ICMP, ICMPv6, DHCP + and DNS. Allow all forwarded traffic. + Note that future package updates may change the definition of the + zone unless you overwrite it with your own definition. + </description> + + <rule priority='32767'> + <reject/> + </rule> + + <protocol value='icmp'/> + <protocol value='ipv6-icmp'/> + <service name="dhcp"/> + <service name="dns"/> +</zone> |