Public bug reported:
What happens
------------
As installed by the package, firewalld doesn't successfully start from
systemd (it can be started by running the daemon by hand in a root
shell). There is no log output, the program just dies apparently.
After some experimentation I determined that I had to remove a few of
the restrictions from the systemd service for. My override file ended up
with the following after experimentation:
```
[Service]
PrivateDevices=no
ProtectControlGroups=no
ProtectHome=no
ProtectKernelLogs=no
ProtectSystem=no
```
I have determined that ProtectHome=tmpfs or ProtectHome=read-only isn't
enough. Nor can I remove any of the other settings.
The system is running Ubuntu 26.04 but was upgraded from 24.04. I have
no idea why these are needed, it seems rather strange.
What I expect to happen
-----------------------
That firewalld works out of the box.
❯ lsb_release -rd
Description: Ubuntu 26.04.1 LTS
Release: 26.04
❯ apt-cache policy firewalld
firewalld:
Installed: 2.3.1-3
Candidate: 2.3.1-3
Version table:
*** 2.3.1-3 500
500 http://se.archive.ubuntu.com/ubuntu resolute/universe amd64 Packages
500 http://se.archive.ubuntu.com/ubuntu resolute/universe i386 Packages
100 /var/lib/dpkg/status
ProblemType: Bug
DistroRelease: Ubuntu 26.04
Package: firewalld 2.3.1-3
ProcVersionSignature: Ubuntu 7.0.0-38.38-generic 7.0.14
Uname: Linux 7.0.0-38-generic x86_64
ApportVersion: 2.34.1-0ubuntu0.1
Architecture: amd64
CasperMD5CheckResult: pass
CurrentDesktop: KDE
Date: Mon Oct 5 15:37:20 2026
InstallationDate: Installed on 2023-05-30 (1224 days ago)
InstallationMedia: Ubuntu 22.04.2 LTS "Jammy Jellyfish" - Release amd64
(20230223)
PackageArchitecture: all
SourcePackage: firewalld
UpgradeStatus: Upgraded to resolute on 2026-10-01 (4 days ago)
modified.conffile..etc.firewalld.firewalld.conf: [deleted]
** Affects: firewalld (Ubuntu)
Importance: Undecided
Status: New
** Tags: amd64 apport-bug resolute wayland-session
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2169592
Title:
firewalld doesn't start, unless security restrictions are relaxed in
systemd
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/firewalld/+bug/2169592/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
