mirror of
https://github.com/containers/podman.git
synced 2025-10-31 10:00:01 +08:00
d377a51578
Use the new firewall code vendored from CNI to replace the existing iptables rule addition handler we had in place. This adds proper support for firewalld and should be much better at interacting with the firewall. Signed-off-by: Matthew Heon <matthew.heon@gmail.com> Closes: #1431 Approved by: baude
44 lines
1.5 KiB
Go
44 lines
1.5 KiB
Go
// Copyright 2016 CNI authors
|
|
//
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
// you may not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
// See the License for the specific language governing permissions and
|
|
// limitations under the License.
|
|
|
|
package firewall
|
|
|
|
import (
|
|
"fmt"
|
|
)
|
|
|
|
// FirewallNone is a firewall backend for environments where manipulating the
|
|
// system firewall is unsupported (for example, when running without root).
|
|
// Nolint applied to avoid firewall.FirewallNone name duplication notes.
|
|
//nolint
|
|
type FirewallNone struct{}
|
|
|
|
func newNoneBackend() (FirewallBackend, error) {
|
|
return &FirewallNone{}, nil
|
|
}
|
|
|
|
// Add adds a rule to the system firewall.
|
|
// No action is taken and an error is unconditionally returned as this backend
|
|
// does not support manipulating the firewall.
|
|
func (f *FirewallNone) Add(conf *FirewallNetConf) error {
|
|
return fmt.Errorf("cannot modify system firewall rules")
|
|
}
|
|
|
|
// Del deletes a rule from the system firewall.
|
|
// No action is taken and an error is unconditionally returned as this backend
|
|
// does not support manipulating the firewall.
|
|
func (f *FirewallNone) Del(conf *FirewallNetConf) error {
|
|
return fmt.Errorf("cannot modify system firewall rules")
|
|
}
|