mirror of
https://github.com/libvirt/libvirt.git
synced 2025-02-25 18:55:26 -06:00
Revert "network: *un*set the firewalld zone while shutting down a network"
This reverts commit 200f60b2e1
. The same
functionality will be re-added in a different way in an upcoming patch.
Signed-off-by: Laine Stump
Reviewed-by: Jiri Denemark <jdenemar@redhat.com>
This commit is contained in:
parent
bd6d7ebf62
commit
816876f517
@ -2452,7 +2452,6 @@ virFirewallDGetPolicies;
|
|||||||
virFirewallDGetVersion;
|
virFirewallDGetVersion;
|
||||||
virFirewallDGetZones;
|
virFirewallDGetZones;
|
||||||
virFirewallDInterfaceSetZone;
|
virFirewallDInterfaceSetZone;
|
||||||
virFirewallDInterfaceUnsetZone;
|
|
||||||
virFirewallDIsRegistered;
|
virFirewallDIsRegistered;
|
||||||
virFirewallDPolicyExists;
|
virFirewallDPolicyExists;
|
||||||
virFirewallDSynchronize;
|
virFirewallDSynchronize;
|
||||||
|
@ -2127,8 +2127,6 @@ networkStartNetworkVirtual(virNetworkDriverState *driver,
|
|||||||
def->forward.type != VIR_NETWORK_FORWARD_OPEN)
|
def->forward.type != VIR_NETWORK_FORWARD_OPEN)
|
||||||
networkRemoveFirewallRules(obj);
|
networkRemoveFirewallRules(obj);
|
||||||
|
|
||||||
networkUnsetBridgeZone(def);
|
|
||||||
|
|
||||||
virNetworkObjUnrefMacMap(obj);
|
virNetworkObjUnrefMacMap(obj);
|
||||||
|
|
||||||
ignore_value(virNetDevBridgeDelete(def->bridge));
|
ignore_value(virNetDevBridgeDelete(def->bridge));
|
||||||
@ -2167,8 +2165,6 @@ networkShutdownNetworkVirtual(virNetworkObj *obj)
|
|||||||
if (def->forward.type != VIR_NETWORK_FORWARD_OPEN)
|
if (def->forward.type != VIR_NETWORK_FORWARD_OPEN)
|
||||||
networkRemoveFirewallRules(obj);
|
networkRemoveFirewallRules(obj);
|
||||||
|
|
||||||
networkUnsetBridgeZone(def);
|
|
||||||
|
|
||||||
ignore_value(virNetDevBridgeDelete(def->bridge));
|
ignore_value(virNetDevBridgeDelete(def->bridge));
|
||||||
|
|
||||||
/* See if its still alive and really really kill it */
|
/* See if its still alive and really really kill it */
|
||||||
|
@ -392,20 +392,6 @@ networkSetBridgeZone(virNetworkDef *def)
|
|||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
void
|
|
||||||
networkUnsetBridgeZone(virNetworkDef *def)
|
|
||||||
{
|
|
||||||
/* If there is a libvirt-managed bridge device remove it from any
|
|
||||||
* zone it had been placed in as a part of deleting the bridge.
|
|
||||||
* DO NOT CALL THIS FOR 'bridge' forward mode, since that
|
|
||||||
* bridge is not managed by libvirt.
|
|
||||||
*/
|
|
||||||
if (def->bridge && def->forward.type != VIR_NETWORK_FORWARD_BRIDGE
|
|
||||||
&& virFirewallDIsRegistered() == 0) {
|
|
||||||
virFirewallDInterfaceUnsetZone(def->bridge);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
int
|
int
|
||||||
networkAddFirewallRules(virNetworkDef *def,
|
networkAddFirewallRules(virNetworkDef *def,
|
||||||
virFirewallBackend firewallBackend,
|
virFirewallBackend firewallBackend,
|
||||||
|
@ -51,12 +51,6 @@ networkSetBridgeZone(virNetworkDef *def)
|
|||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
void
|
|
||||||
networkUnsetBridgeZone(virNetworkDef *def G_GNUC_UNUSED)
|
|
||||||
{
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
int networkAddFirewallRules(virNetworkDef *def G_GNUC_UNUSED,
|
int networkAddFirewallRules(virNetworkDef *def G_GNUC_UNUSED,
|
||||||
virFirewallBackend firewallBackend,
|
virFirewallBackend firewallBackend,
|
||||||
virFirewall **fwRemoval G_GNUC_UNUSED)
|
virFirewall **fwRemoval G_GNUC_UNUSED)
|
||||||
|
@ -38,6 +38,4 @@ int networkAddFirewallRules(virNetworkDef *def,
|
|||||||
virFirewallBackend firewallBackend,
|
virFirewallBackend firewallBackend,
|
||||||
virFirewall **fwRemoval);
|
virFirewall **fwRemoval);
|
||||||
|
|
||||||
void networkUnsetBridgeZone(virNetworkDef *def);
|
|
||||||
|
|
||||||
void networkRemoveFirewallRules(virNetworkObj *obj);
|
void networkRemoveFirewallRules(virNetworkObj *obj);
|
||||||
|
@ -449,29 +449,6 @@ virFirewallDInterfaceSetZone(const char *iface,
|
|||||||
}
|
}
|
||||||
|
|
||||||
|
|
||||||
int
|
|
||||||
virFirewallDInterfaceUnsetZone(const char *iface)
|
|
||||||
{
|
|
||||||
GDBusConnection *sysbus = virGDBusGetSystemBus();
|
|
||||||
g_autoptr(GVariant) message = NULL;
|
|
||||||
|
|
||||||
if (!sysbus)
|
|
||||||
return -1;
|
|
||||||
|
|
||||||
message = g_variant_new("(ss)", "", iface);
|
|
||||||
|
|
||||||
return virGDBusCallMethod(sysbus,
|
|
||||||
NULL,
|
|
||||||
NULL,
|
|
||||||
NULL,
|
|
||||||
VIR_FIREWALL_FIREWALLD_SERVICE,
|
|
||||||
"/org/fedoraproject/FirewallD1",
|
|
||||||
"org.fedoraproject.FirewallD1.zone",
|
|
||||||
"removeInterface",
|
|
||||||
message);
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
void
|
void
|
||||||
virFirewallDSynchronize(void)
|
virFirewallDSynchronize(void)
|
||||||
{
|
{
|
||||||
|
@ -46,6 +46,4 @@ int virFirewallDApplyRule(virFirewallLayer layer,
|
|||||||
int virFirewallDInterfaceSetZone(const char *iface,
|
int virFirewallDInterfaceSetZone(const char *iface,
|
||||||
const char *zone);
|
const char *zone);
|
||||||
|
|
||||||
int virFirewallDInterfaceUnsetZone(const char *iface);
|
|
||||||
|
|
||||||
void virFirewallDSynchronize(void);
|
void virFirewallDSynchronize(void);
|
||||||
|
Loading…
Reference in New Issue
Block a user