Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Include warning for NetworkManager keyfiles in RHEL9 #10330

Merged

Conversation

marcusburghardt
Copy link
Member

Description:

RHEL9 prefers and recommends to use NetworkManager keyfiles instead of the ifcfg format for NIC configuration.
New NICs will be automatically configured in the NM keyfiles format by default.
However, if the system was upgraded from a RHEL8, for example, the settings for existing NICs will remain stored in ifcfg format and the firewalld_sshd_port_enabled will fail.

They NIC settings should be migrated to the NM keyfiles format by the Admins.
It was included a warning in the firewalld_sshd_port_enabled rule to create more awareness for admins.

Rationale:

More awareness for corner cases.

RHEL9 prefers and recommends to use NetworkManager keyfiles instead of
the ifcfg format for NIC configuration. New NICs will be automatically
configured in the NM keyfiles format by default. However, if the system
was upgraded from a RHEL8, the settings for existing NICs will remain
stored in ifcfg format. They should be migrated to the NM keyfiles
format by the Admins. It was included a warning in the
firewalld_sshd_port_enabled rule to create more awareness for admins.
@marcusburghardt marcusburghardt added Highlight This PR/Issue should make it to the featured changelog. RHEL9 Red Hat Enterprise Linux 9 product related. labels Mar 13, 2023
@marcusburghardt marcusburghardt added this to the 0.1.67 milestone Mar 13, 2023
@github-actions
Copy link

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment
Open in Gitpod

Oracle Linux 8 Environment
Open in Gitpod

@codeclimate
Copy link

codeclimate bot commented Mar 13, 2023

Code Climate has analyzed commit 436a375 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 51.7% (0.0% change).

View more on Code Climate.

@jan-cerny jan-cerny self-assigned this Mar 14, 2023
Copy link
Collaborator

@jan-cerny jan-cerny left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the excellent analyisis.

I have seen that the warning is present in the RHEL 9 STIG HTML guide under this rule.

@jan-cerny jan-cerny merged commit 5deff6b into ComplianceAsCode:master Mar 14, 2023
@marcusburghardt marcusburghardt deleted the firewalld_upgrade_warning branch March 27, 2023 17:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Highlight This PR/Issue should make it to the featured changelog. RHEL9 Red Hat Enterprise Linux 9 product related.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants