/qubes-issues

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

firewall on-failure lockdown mode #2248

Open
adrelanos opened this Issue Aug 14, 2016 · 1 comment

Comments

Assignees
No one assigned
Labels
Projects
None yet
Milestone
  Release 4.1
2 participants
@adrelanos @andrewdavidwong
@adrelanos
Member

adrelanos commented Aug 14, 2016 •
edited
Edited 1 time
  • @adrelanos adrelanos edited Aug 15, 2016 (most recent)

In case of...

  • failure of some firewall related systemd service,
  • some binary (iptables) error,
  • or due some configuration mistake...

Prevent the network from coming up so everything fails closed in such failure cases.

(rustybird/corridor#23 //cc @rustybird)

adrelanos added a commit to adrelanos/qubes-whonix that referenced this issue Aug 14, 2016

@adrelanos
Add Fail Closed Mechanism. 
When the Whonix firewall systemd service failed, do not bring up the network.

After=whonix-firewall.service
Requires=whonix-firewall.service

Related:
QubesOS/qubes-issues#2248
Verified
This commit was signed with a verified signature.
@adrelanos adrelanos Patrick Schleizer
GPG key ID: CB8D50BB77BB3C48 Learn about signing commits
edd95e5

@andrewdavidwong andrewdavidwong added enhancement C: core labels Aug 15, 2016

@andrewdavidwong

This comment has been minimized.

Show comment
Hide comment
@andrewdavidwong

andrewdavidwong Aug 15, 2016

Member

Related: #2003
Member

andrewdavidwong commented Aug 15, 2016

Related: #2003

@andrewdavidwong andrewdavidwong added this to the Release 4.0 milestone Dec 16, 2017

@andrewdavidwong andrewdavidwong modified the milestones: Release 4.0, Release 4.1 Mar 31, 2018

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment