Merge pull request #80 from ingrammicro/bugfix/79-rhel-firewall-flush

Ensure firewall flush in RHEL allows all traffic in (issue #79)
ingrammicro · Jun 29, 2018 · ad83190 · ad83190
2 parents 96a150f + d1a83b1
commit ad83190
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/firewall/iptables.go b/firewall/iptables.go
@@ -4,6 +4,7 @@ package firewall
 
 import (
 	"fmt"
+	"os"
 
 	log "github.com/Sirupsen/logrus"
 	"github.com/ingrammicro/concerto/utils"
@@ -43,6 +44,9 @@ func apply(policy Policy) error {
 }
 
 func flush() error {
+	if _, err := os.Stat("/etc/redhat-release"); err == nil {
+		utils.RunCmd("firewall-cmd --set-default-zone=trusted")
+	}
 	utils.RunCmd("/sbin/iptables -w -P INPUT ACCEPT")
 	utils.RunCmd("/sbin/iptables -w -F CONCERTO")
 	utils.RunCmd("/sbin/iptables -w -D INPUT -j CONCERTO")