Skip to content

Commit ac20628

Browse files
committed
fix(fw): start: remove ipset probe
This probe is causing kernel modules to be loaded even if the ipset backend will not be used due to "omit native ipsets". Since the backend and iptables are deprecated lets just remove the probe and let it fail at runtime. Fixes: RHEL-36234
1 parent 1e401a7 commit ac20628

File tree

1 file changed

+0
-13
lines changed

1 file changed

+0
-13
lines changed

src/firewall/core/fw.py

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -272,19 +272,6 @@ def _start_check_tables(self):
272272
raise FirewallError(errors.UNKNOWN_ERROR, "No IPv4 and IPv6 firewall.")
273273

274274
def _start_probe_backends(self):
275-
try:
276-
self.ipset_backend.set_list()
277-
except ValueError:
278-
if self.nftables_enabled:
279-
log.info1(
280-
"ipset not usable, disabling ipset usage in firewall. Other set backends (nftables) remain usable."
281-
)
282-
else:
283-
log.warning("ipset not usable, disabling ipset usage in firewall.")
284-
self.ipset_supported_types = []
285-
# ipset is not usable
286-
self.ipset_enabled = False
287-
288275
self.ip4tables_backend.fill_exists()
289276
if not self.ip4tables_backend.restore_command_exists:
290277
if self.ip4tables_backend.command_exists:

0 commit comments

Comments
 (0)