From Fedora Project Wiki

Note.png
Associated release criterion
This test case is associated with the Basic_Release_Criteria#firewall-configuration release criterion. If you are doing release validation testing, a failure of this test case may be a breach of that release criterion. If so, please file a bug and nominate it as blocking the appropriate milestone, using the blocker bug nomination page.


Description

This test case tests whether disabling the firewall works correctly in a kickstart-driven installation.

Setup

  1. Prepare a test system (virtual or real) with sufficient memory to install Fedora, an empty hard disk (or such that you do not mind losing the contents of all connected hard disks: this test WILL wipe all hard disks connected to the test system), and (ideally) a network connection and another system from which you can connect to the test system

How to test

  1. Boot using a dedicated installer image for the Fedora release you wish to test
  2. At the boot menu, edit the options for one of the "Install Fedora" options to include the parameter inst.ks=http://fedorapeople.org/groups/qa/kickstarts/firewall-disabled-net.ks
  3. The installation should run unattended: allow it to complete
  4. Boot the installed system and log in as 'root' with password 'anaconda'
  5. Run firewall-cmd --state
  6. Run iptables -L -v
  7. If possible, try to connect to a port or running service from another system on the local network

Expected Results

  1. firewall-cmd --state should report not running
  2. No REJECT rules should be present in the iptables -L -v output
  3. Connecting to any running service from other systems should work (so long as no other firewalls or similar are in the way)