firewalld-formula

Saltstack Official FirewallD Formula

Steven Daniele 94d2b0b97c fix: do not error on unknown os_family grain If the formula was ran on a system that reported an os_family that wasn't one of "Debian", "RedHat", "Arch", "Suse" then the map.jinja template would fail to render with "'NoneType' is not iterable. This occurs because grains.filter_by will return None when it fails match the grain to the input dictionary. The value is then blindly passed into a dict.update() which causes the failure. In this patch we ensure that the default values, as defined in defaults.yaml, are always applied when grain matching fails.		4 år sedan
..
files	style(zone.xml): remove all trailing whitespaces	4 år sedan
yaml_dump	test: verify map output using `yaml_dump`	4 år sedan
backend.sls	Refactor backend format, add backward compatibility, simple pkg testing	6 år sedan
config.sls	Default file permission for firewalld.conf is 644 not 640 (CentOS). Even if I think that "others" don't need to read that, it always shows up as file with non-default permissions from default rpm package in security scans. e.g. "rpm -Va \|grep ^.M" or more salty way: "salt '' pkg.verify" / salt '' pkg.modified firewalld mode=True; manual fix e.g. rpm --setperms firewalld-*.el7.noarch	7 år sedan
defaults.yaml	fix: do not error on unknown os_family grain	4 år sedan
direct.sls	Reload, rather than restart, the FirewallD service	7 år sedan
init.sls	feat(linux): archlinux support (no osfinger grain)	5 år sedan
ipsets.sls	update service and zones with more options	5 år sedan
map.jinja	fix: do not error on unknown os_family grain	4 år sedan
osfamilymap.yaml	fix: do not error on unknown os_family grain	4 år sedan
services.sls	Reload, rather than restart, the FirewallD service	7 år sedan
zones.sls	Reload, rather than restart, the FirewallD service	7 år sedan