#10826 NORM Not Tri: OLPC OS builds should include a network firewall

[Zarro Boogs per Child]

#10826: OLPC OS builds should include a network firewall
--------------------------+-------------------------------------------------
 Reporter:  greenfeld     |                 Owner:                                   
     Type:  enhancement   |                Status:  new                              
 Priority:  normal        |             Milestone:  Not Triaged                      
Component:  not assigned  |               Version:  Development build as of this date
 Keywords:                |           Next_action:  diagnose                         
 Verified:  0             |   Deployment_affected:                                   
Blockedby:                |              Blocking:                                   
--------------------------+-------------------------------------------------
 OLPC XO software builds should include a simple, incoming-only state-based
 firewall by default.   I think we are one of the few Linux distributions
 still out there which does not include a firewall.

 Even a certain other major software manufacturer includes a state-based
 firewall of this nature on all of their current OS's by default, even if
 they are on a local network.

 Some ports will have to be open though for mDNS, etc.  This also probably
 should be os-builder configurable.

 See also https://bugzilla.redhat.com/show_bug.cgi?id=699432 , which is a
 bug to fix the SoaS Fedora equivalent.

-- 
Ticket URL: <http://dev.laptop.org/ticket/10826>
One Laptop Per Child <http://laptop.org/>
OLPC bug tracking system