firewalld.richlanguage – Rich Language Documentation Description With the rich language more complex firewall rules can be created in an easy to understand way. The language uses keywords with values and is an abstract representation of ip*tables rules. The rich language extends the current zone elements (service, port, icmp-block, icmp-type, masquerade, forward-port and source-port) with additional…
firewalld.zones – firewalld zones Description What is a zone? A network zone defines the level of trust for network connections. This is a one to many relation, which means that a connection can only be part of one zone, but a zone can be used for many network connections. The zone defines the firewall features…
firewalld.lockdown-whitelist – firewalld lockdown whitelist configuration file Synopsis /etc/firewalld/lockdown-whitelists.xml Description The firewalld lockdown-whitelist configuration file contains the selinux contexts, commands, users and user ids that are white-listed when firewalld lockdown feature is enabled (see firewalld.conf(5) and firewall-cmd(1)). This example configuration file shows the structure of an lockdown-whitelist file: <?xml version="1.0" encoding="utf-8"?> <whitelist> <selinux context="selinuxcontext"/> <command…
firewalld.ipset – firewalld ipset configuration files Synopsis /etc/firewalld/ipsets/ipset.xml /usr/lib/firewalld/ipsets/ipset.xml Description A firewalld ipset configuration file provides the information of an ip set for firewalld. The most important configuration options are type, option and entry. This example configuration file shows the structure of an ipset configuration file: <?xml version="1.0" encoding="utf-8"?> <ipset type="hash:ip"> <short>My Ipset</short> <description>description</description> <entry>1.2.3.4</entry>…
firewalld.icmptype – firewalld icmptype configuration files Synopsis /etc/firewalld/icmptypes/icmptype.xml /usr/lib/firewalld/icmptypes/icmptype.xml Description A firewalld icmptype configuration file provides the information for an Internet Control Message Protocol (ICMP) type for firewalld. This example configuration file shows the structure of an icmptype configuration file: <?xml version="1.0" encoding="utf-8"?> <icmptype> <short>My Icmptype</short> <description>description</description> <destination ipv4="yes" ipv6="yes"/> </icmptype> Options The config can…
firewalld.helper – firewalld helper configuration files Synopsis /etc/firewalld/helpers/helper.xml /usr/lib/firewalld/helpers/helper.xml Description A firewalld helper configuration file provides the information of a helper entry for firewalld. The most important configuration options are ports, family and module. This example configuration file shows the structure of a helper configuration file: <?xml version="1.0" encoding="utf-8"?> <helper module="nf_conntrack_module" [family="ipv4|ipv6"]> <short>short</short> <description>description</description> <port…
firewalld.direct – firewalld direct configuration file Synopsis /etc/firewalld/direct.xml Description Direct configuration gives a more direct access to the firewall. It requires user to know basic ip(6)tables/ebtables concepts, i.e. table (filter/mangle/nat/…), chain (INPUT/OUTPUT/FORWARD/…), commands (-A/-D/-I/…), parameters (-p/-s/-d/-j/…) and targets (ACCEPT/DROP/REJECT/…). Direct configuration should be used only as a last resort when it’s not possible to use…
firewalld.dbus – firewalld D-Bus interface description Object Paths This is the basic firewalld object path structure. The used interfaces are explained below in the section called “INTERFACES”. /org/fedoraproject/FirewallD1 Interfaces org.fedoraproject.FirewallD1 org.fedoraproject.FirewallD1.direct org.fedoraproject.FirewallD1.ipset org.fedoraproject.FirewallD1.policies org.fedoraproject.FirewallD1.zone org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config Interfaces org.fedoraproject.FirewallD1.config org.fedoraproject.FirewallD1.config.direct org.fedoraproject.FirewallD1.config.policies org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config/zone/i Interfaces org.fedoraproject.FirewallD1.config.zone org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config/service/i Interfaces: org.fedoraproject.FirewallD1.config.service org.freedesktop.DBus.Introspectable org.freedesktop.DBus.Properties /org/fedoraproject/FirewallD1/config/ipset/i Interfaces…
firewalld.conf – firewalld configuration file Synopsis /etc/firewalld/firewalld.conf Description firewalld.conf is loaded by firewalld during the initialization process. The file contains the basic configuration options for firewalld. Options These are the options that can be set in the config file: DefaultZone This sets the default zone for connections or interfaces if the zone is not selected…
firehol.conf – Configuration file for firehol(1) Description firehol.conf is the configuration file for firehol(1), which creates an iptables firewall from the simple rules in this file. This file is parsed as a bash(1) script, so it’s no problem to use variables or complex bashisms. Commands interface <real interface> <name> [optional rule parameters] The interface command…
system-auth-ac, password-auth-ac, smartcard-auth-ac, fingerprint-auth-ac, postlogin-ac – Common configuration files for PAMified services written by authconfig(8) Synopsis /etc/pam.d/system-auth-ac Description The purpose of this configuration file is to provide common configuration file for all applications and service daemons calling PAM library. The system-auth configuration file is included from all individual service configuration files with the help of…
filesystems – Linux filesystem types: ext, ext2, ext3, ext4, hpfs, iso9660, JFS, minix, msdos, ncpfs nfs, ntfs, proc, Reiserfs, smb, sysv, umsdos, vfat, XFS, xiafs Description When, as is customary, the proc filesystem is mounted on /proc, you can find in the file /proc/filesystems which filesystems your kernel currently supports; see proc(5) for more details….
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
selabel_file – userspace SELinux labeling interface and configuration file format for the file contexts backend Synopsis #include <selinux/label.h> int selabel_lookup(struct selabel_handle *hnd, char **context, const char *path, int mode); int selabel_lookup_raw(struct selabel_handle *hnd, char **context, const char *path, int mode); Description The file contexts backend maps from pathname/mode combinations into security contexts. It is used…
fido.conf Synopsis fido.conf The default file /etc/fido/fido.conf You can override the default file with the FIDORC ENV variable or the -f /path/file command line option. Description fido.conf is the configuration file for fido. The file consists of two parts, GLOBAL settings and FILE settings. GLOBAL settings are best defined at the top of the file…
fence_virtd.conf – configuration file for fence_virtd Description The fence_virtd.conf file contains configuration information for fence_virtd, a fencing request routing daemon for clusters of virtual machines. The file is tree-structured. There are parent/child relationships and sibling relationships between the nodes. foo { bar { baz = "1"; } } There are three primary sections of fence_virtd.conf….
fence_virt.conf – configuration file for fence_virtd Description The fence_virt.conf file contains configuration information for fence_virtd, a fencing request routing daemon for clusters of virtual machines. The file is tree-structured. There are parent/child relationships and sibling relationships between the nodes. foo { bar { baz = "1"; } } There are three primary sections of fence_virt.conf….