Re: No firewall and X server listening globally

[email protected] Fri, 22 May 2015 12:47:22 +0200
Newsgroups gmane.linux.suse.security
Message-ID <[email protected]>
Thank you for your report

On Wed, May 06, 2015 at 12:06:05PM +0200, Johannes Segitz wrote:
> On Wed, Apr 29, 2015 at 03:47:07PM +0300, Uwe Geuder wrote:
> > I have installed several OpenSUSE machines during recent years and I
> > believe they always enabled the firewall by default.
> 
> The are in the default install, but apparently not on the live CDs. I'm
> currently working on enabling the firewall by default. For now the firewall
> has to be enabled manually either before installing or after the install.

For the live DVDs (at least for KDE) the firewall is not active, so if you
install it uses this configuration. Changing the existing live DVDs is
problematic (and there is already a warning message "Some alternative media
(eg. live and rescue systems) are also available, although they are less
tested and recommended for only limited use. ").

I submitted a fix so that the next version will enable the firewall by
default and also submitted changed release notes, that warn of this problem
and show how to enable the firewall.

Johannes
-- 
GPG Key E7C81FA0       EE16 6BCE AD56 E034 BFB3  3ADD 7BF7 29D5 E7C8 1FA0
Subkey fingerprint:    250F 43F5 F7CE 6F1E 9C59  4F95 BC27 DD9D 2CC4 FD66
SUSE Linux GmbH, GF: Felix Imendörffer, Jane Smithard, Dilip Upmanyu,
Graham Norton, HRB 21284 (AG Nürnberg)
signature.asc (application/pgp-signature, 801 B)
-----BEGIN PGP SIGNATURE-----
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=0JCp
-----END PGP SIGNATURE-----