From c9c00e84a9a8bfb47271c1295d34c812676a0912 Mon Sep 17 00:00:00 2001
From: "David Kaspar [Dee'Kej]" <dkaspar@redhat.com>
Date: Tue, 10 Oct 2017 17:49:37 +0200
Subject: network-scripts: firewall-cmd replaced with DBus calls

  To speed things up. Based on patch & comments from:
  https://bugzilla.redhat.com/show_bug.cgi?id=1497759
---
 sysconfig/network-scripts/ifdown-post | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

(limited to 'sysconfig/network-scripts/ifdown-post')

diff --git a/sysconfig/network-scripts/ifdown-post b/sysconfig/network-scripts/ifdown-post
index 8b56e14f..71eebf65 100755
--- a/sysconfig/network-scripts/ifdown-post
+++ b/sysconfig/network-scripts/ifdown-post
@@ -49,9 +49,12 @@ else
 fi
 fi
 
-# Inform firewall
-if [ -x /usr/bin/firewall-cmd -a "${REALDEVICE}" != "lo" ]; then
-    /usr/bin/firewall-cmd --remove-interface="${DEVICE}" > /dev/null 2>&1
+# Reset firewall ZONE to "default":
+if [ "${REALDEVICE}" != "lo" ]; then
+    dbus-send --system --dest=org.fedoraproject.FirewallD1 \
+              /org/fedoraproject/FirewallD1 \
+              org.fedoraproject.FirewallD1.zone.removeInterface \
+              string: "" string:"${DEVICE}"
 fi
 
 # Notify programs that have requested notification
-- 
cgit v1.2.1