|
 |
e3f863 |
From 9b8de9ce33e671a89ea8fd0b6e9c391c0b779726 Mon Sep 17 00:00:00 2001
|
|
|
e3f863 |
From: Eric Garver <e@erig.me>
|
|
|
e3f863 |
Date: Wed, 23 May 2018 14:35:10 -0400
|
|
|
e3f863 |
Subject: [PATCH 3/5] firewall-offline-cmd: add --check-config option
|
|
|
e3f863 |
|
|
|
e3f863 |
(cherry picked from commit 749e64b74cff231585667417b37ff4f60af65dc0)
|
|
|
e3f863 |
---
|
|
|
e3f863 |
src/firewall-offline-cmd | 16 +++++++++++++++-
|
|
|
e3f863 |
1 file changed, 15 insertions(+), 1 deletion(-)
|
|
|
e3f863 |
|
|
|
e3f863 |
diff --git a/src/firewall-offline-cmd b/src/firewall-offline-cmd
|
|
|
e3f863 |
index 7f7c10739f77..13ecfadf4080 100755
|
|
|
e3f863 |
--- a/src/firewall-offline-cmd
|
|
|
e3f863 |
+++ b/src/firewall-offline-cmd
|
|
|
e3f863 |
@@ -35,6 +35,7 @@ from firewall.errors import FirewallError
|
|
|
e3f863 |
from firewall import config
|
|
|
e3f863 |
from firewall.core.fw_test import Firewall_test
|
|
|
e3f863 |
from firewall.functions import joinArgs, splitArgs
|
|
|
e3f863 |
+from firewall.core.io.functions import check_config
|
|
|
e3f863 |
from firewall.core.io.zone import zone_reader
|
|
|
e3f863 |
from firewall.core.io.service import service_reader
|
|
|
e3f863 |
from firewall.core.io.ipset import ipset_reader
|
|
|
e3f863 |
@@ -62,6 +63,7 @@ General Options
|
|
|
e3f863 |
-q, --quiet Do not print status messages
|
|
|
e3f863 |
--system-config Path to firewalld system configuration
|
|
|
e3f863 |
--default-config Path to firewalld default configuration
|
|
|
e3f863 |
+ --check-config Check system and default configuration
|
|
|
e3f863 |
|
|
|
e3f863 |
Lokkit Compatibility Options
|
|
|
e3f863 |
--migrate-system-config-firewall=<file>
|
|
|
e3f863 |
@@ -532,6 +534,7 @@ parser_group_lokkit.add_argument("--block-icmp", metavar="<icmptype>", action='a
|
|
|
e3f863 |
|
|
|
e3f863 |
parser.add_argument("--system-config", metavar="path")
|
|
|
e3f863 |
parser.add_argument("--default-config", metavar="path")
|
|
|
e3f863 |
+parser.add_argument("--check-config", action="store_true")
|
|
|
e3f863 |
|
|
|
e3f863 |
parser_group_standalone = parser.add_mutually_exclusive_group()
|
|
|
e3f863 |
parser_group_standalone.add_argument("-h", "--help",
|
|
|
e3f863 |
@@ -970,7 +973,8 @@ cmd.set_verbose(a.verbose)
|
|
|
e3f863 |
if not (options_standalone or options_ipset or \
|
|
|
e3f863 |
options_lokkit or \
|
|
|
e3f863 |
options_icmptype or options_service or options_helper or \
|
|
|
e3f863 |
- options_permanent or options_direct or options_desc_xml_file):
|
|
|
e3f863 |
+ options_permanent or options_direct or options_desc_xml_file or \
|
|
|
e3f863 |
+ a.check_config):
|
|
|
e3f863 |
cmd.fail(parser.format_usage() + "No option specified.")
|
|
|
e3f863 |
|
|
|
e3f863 |
if options_lokkit and (options_standalone or \
|
|
|
e3f863 |
@@ -1035,6 +1039,16 @@ if a.system_config:
|
|
|
e3f863 |
config.set_system_config_paths(a.system_config)
|
|
|
e3f863 |
if a.default_config:
|
|
|
e3f863 |
config.set_default_config_paths(a.default_config)
|
|
|
e3f863 |
+if a.check_config:
|
|
|
e3f863 |
+ try:
|
|
|
e3f863 |
+ fw = Firewall_test()
|
|
|
e3f863 |
+ fw.start()
|
|
|
e3f863 |
+ check_config(fw)
|
|
|
e3f863 |
+ except FirewallError as error:
|
|
|
e3f863 |
+ cmd.print_and_exit("Configuration error: %s" % error, error.code)
|
|
|
e3f863 |
+ except Exception as msg:
|
|
|
e3f863 |
+ cmd.fail("Configuration error: %s" % msg)
|
|
|
e3f863 |
+ sys.exit(0)
|
|
|
e3f863 |
|
|
|
e3f863 |
zone = a.zone
|
|
|
e3f863 |
fw = Firewall_test()
|
|
|
e3f863 |
--
|
|
|
e3f863 |
2.16.3
|
|
|
e3f863 |
|