firewalld-formula

Saltstack Official FirewallD Formula

Angelo Verona b1d6b52307 Default file permission for firewalld.conf is 644 not 640 (CentOS). Even if I think that "others" don't need to read that, it always shows up as file with non-default permissions from default rpm package in security scans. e.g. "rpm -Va \|grep ^.M" or more salty way: "salt '' pkg.verify" / salt '' pkg.modified firewalld mode=True; manual fix e.g. rpm --setperms firewalld-*.el7.noarch		7 years ago
firewalld	Default file permission for firewalld.conf is 644 not 640 (CentOS). Even if I think that "others" don't need to read that, it always shows up as file with non-default permissions from default rpm package in security scans. e.g. "rpm -Va \|grep ^.M" or more salty way: "salt '' pkg.verify" / salt '' pkg.modified firewalld mode=True; manual fix e.g. rpm --setperms firewalld-*.el7.noarch	7 years ago
test/integration/default/serverspec	Add basic test suite	7 years ago
.gitignore	Add basic test suite	7 years ago
.kitchen.yml	Reload, rather than restart, the FirewallD service	7 years ago
LICENSE	Initial commit.	10 years ago
README.rst	Updated Readme,	9 years ago
VERSION	add ipset support for firewalld	8 years ago
pillar.example.sls	implement direct rules	8 years ago

README.rst

===========
firewalld-formula
===========

Salt Stack Formula to set up and configure Firewalld, dynamically managed firewall with support for network/firewall zones to define the trust level of network connections or interfaces

NOTICE BEFORE YOU USE
=====================

* This formula aims to follow the conventions and recommendations described at http://docs.saltstack.com/topics/conventions/formulas.html

TODO
====

* configure local pre-commit hooks (code syntax check based on file extension, check for ugly *utf-8 mac os white space*)

Instructions
============

1. Add this repository as a `GitFS <http://docs.saltstack.com/topics/tutorials/gitfs.html>`_ backend in your Salt master config.

2. Configure your Pillar top file (``/srv/pillar/top.sls``), see pillar.example

3. Include this Formula within another Formula or simply define your needed states within the Salt top file (``/srv/salt/top.sls``).

Available states
================

.. contents::
    :local:

``firewalld``
-------
Manage firewalld

Additional resources
====================

None

Formula Dependencies
====================

None

Contributions
=============

Contributions are always welcome. All development guidelines you have to know are

* write clean code (proper YAML+Jinja syntax, no trailing whitespaces, no empty lines with whitespaces, LF only)
* set sane default settings
* test your code
* update README.rst doc

Salt Compatibility
==================

Tested with:

* 2014.1.x
* 2015.5.x

OS Compatibility
================

Tested with:

* CentOS 7
* Archlinux