From 8d400b8ca49da223f55c13a11e4f1de76a80ee24 Mon Sep 17 00:00:00 2001 From: Sean Whitton Date: Fri, 29 Oct 2021 14:19:39 -0700 Subject: FIREWALLD:ZONE: note idea to use hostattrs to gather zone settings Signed-off-by: Sean Whitton --- src/property/firewalld.lisp | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/property/firewalld.lisp b/src/property/firewalld.lisp index 7b1ec10..e71473d 100644 --- a/src/property/firewalld.lisp +++ b/src/property/firewalld.lisp @@ -137,6 +137,8 @@ set up appropriately accessible and inaccessible. (By contrast, for defining services and policies we take the simpler approach of just setting the whole XML configuration, using FIREWALLD:SERVICE and FIREWALLD:POLICY.)" + ;; Another option might be to push all the settings to hostattrs and then at + ;; :APPLY time, generate the whole .xml / run commands to set all the XML. (:desc #?"firewalld has zone configuration for ${zone}") (%setxml "zones" zone xml)) -- cgit v1.2.3