aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorBill Nottingham <notting@redhat.com>2012-12-07 15:57:07 -0500
committerBill Nottingham <notting@redhat.com>2012-12-07 15:57:07 -0500
commitfb15854e3e7ff889a63cfefb0b67cfc827d47703 (patch)
treecf5823c8a6469554f27c4d1ed45408f3107ff9b9
parentdaaf1b7eb9aad6b3410c8992e0b3991854e1de87 (diff)
downloadinitscripts-fb15854e3e7ff889a63cfefb0b67cfc827d47703.tar
initscripts-fb15854e3e7ff889a63cfefb0b67cfc827d47703.tar.gz
initscripts-fb15854e3e7ff889a63cfefb0b67cfc827d47703.tar.bz2
initscripts-fb15854e3e7ff889a63cfefb0b67cfc827d47703.tar.xz
initscripts-fb15854e3e7ff889a63cfefb0b67cfc827d47703.zip
Also do firewall zone poking before ifup-ipv6, for DHCPv6 (#802415, modified from <jpopelka@redhat.com>)
-rwxr-xr-xsysconfig/network-scripts/ifup-eth5
1 files changed, 5 insertions, 0 deletions
diff --git a/sysconfig/network-scripts/ifup-eth b/sysconfig/network-scripts/ifup-eth
index 4692f63e..032f6000 100755
--- a/sysconfig/network-scripts/ifup-eth
+++ b/sysconfig/network-scripts/ifup-eth
@@ -289,6 +289,11 @@ if [ -z "${NOZEROCONF}" -a "${ISALIAS}" = "no" -a "${REALDEVICE}" != "lo" ]; the
ip route add 169.254.0.0/16 dev ${REALDEVICE} metric $((1000 + $(cat /sys/class/net/${REALDEVICE}/ifindex))) scope link
fi
+# Inform firewall which network zone (empty means default) this interface belongs to
+if [ -x /usr/bin/firewall-cmd -a "${REALDEVICE}" != "lo" ]; then
+ /usr/bin/firewall-cmd --zone="${ZONE}" --change-interface="${DEVICE}" > /dev/null 2>&1
+fi
+
# IPv6 initialisation?
/etc/sysconfig/network-scripts/ifup-ipv6 ${CONFIG}
if [[ "${DHCPV6C}" = [Yy1]* ]] && [ -x /sbin/dhclient ]; then