Comment 3 for bug 1860677

Revision history for this message
Sylvain Viart (sylvain-viart) wrote (last edit ):

It could be seen as a *security issue*, in my opinion.

If a server or a user is expecting to block thing behind ufw install.
And then he/she install docker with its default, it will bypass the existing firewall configuration. So exposing thing that was blocked previously.

Without any notification.

Available ref:

- https://docs.docker.com/engine/network/packet-filtering-firewalls/#docker-and-ufw - warning on docker side
- https://github.com/chaifeng/ufw-docker - some script and fixes on ufw side
- https://stackoverflow.com/questions/30383845/what-is-the-best-practice-of-docker-ufw-under-ubuntu
- https://github.com/moby/moby/discussions/45524 - discussion on docker side

obviously things get very complicated here... 😉