Latest revision as of 21:06, 23 March 2016

Associated release criterion
This test case is associated with the Basic_Release_Criteria#firewall-configuration release criterion. If you are doing release validation testing, a failure of this test case may be a breach of that release criterion. If so, please file a bug and nominate it as blocking the appropriate milestone, using the blocker bug nomination page.

Description

This test case tests whether disabling the firewall works correctly in a kickstart-driven installation.

Prepare a test system (virtual or real) with sufficient memory to install Fedora, an empty hard disk (or such that you do not mind losing the contents of all connected hard disks: this test WILL wipe all hard disks connected to the test system), and (ideally) a network connection and another system from which you can connect to the test system

Boot using a dedicated installer image for the Fedora release you wish to test
At the boot menu, edit the options for one of the "Install Fedora" options to include the parameter inst.ks=http://fedorapeople.org/groups/qa/kickstarts/firewall-disabled-net.ks
The installation should run unattended: allow it to complete
Boot the installed system and log in as 'root' with password 'anaconda'
Run firewall-cmd --state
Run iptables -L -v
If possible, try to connect to a port or running service from another system on the local network

firewall-cmd --state should report not running
No REJECT rules should be present in the iptables -L -v output
Connecting to any running service from other systems should work (so long as no other firewalls or similar are in the way)

@@ Line 8: / Line 8: @@
 # Boot using a dedicated installer image for the Fedora release you wish to test
 # At the boot menu, edit the options for one of the "Install Fedora" options to include the parameter <tt>inst.ks=http://fedorapeople.org/groups/qa/kickstarts/firewall-disabled-net.ks</tt>
-# The installation should run unattended: allow it to complete, boot the installed system (log in as 'root' with password 'anaconda'), and check the state of the firewall using {{command|sudo iptables -L -v}} (no {{code|REJECT}} rules should be present in the output) or {{command|sudo firewall-cmd --state}} (should report {{code|not running}}), and/or by attempting to connect to a port or running service from the other test system
+# The installation should run unattended: allow it to complete
+# Boot the installed system and log in as 'root' with password 'anaconda'
+# Run {{command|firewall-cmd --state}}
+# Run {{command|iptables -L -v}}
+# If possible, try to connect to a port or running service from another system on the local network
 |results=
-# The firewall should be disabled
+# {{command|firewall-cmd --state}} should report {{code|not running}}
+# No {{code|REJECT}} rules should be present in the {{command|iptables -L -v}} output
+# Connecting to any running service from other systems should work (so long as no other firewalls or similar are in the way)
 }}
 [[Category:Kickstart_test_cases]]