[Pkg-utopia-maintainers] Bug#823921: firewalld: fails to start and so delays system boot

[Uwe Kleine-König]

Package: firewalld
Version: 0.4.1.2-1
Severity: normal

Hello,

	$ sudo journalctl  | grep firewalld
	May 10 14:57:04 perseus systemd[1]: Starting firewalld - dynamic firewall daemon...
	May 10 14:58:34 perseus systemd[1]: firewalld.service: Start operation timed out. Terminating.
	May 10 14:58:34 perseus systemd[1]: Failed to start firewalld - dynamic firewall daemon.
	May 10 14:58:34 perseus systemd[1]: firewalld.service: Unit entered failed state.
	May 10 14:58:34 perseus audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=firewalld comm="systemd" exe="/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
	May 10 14:58:34 perseus systemd[1]: firewalld.service: Failed with result 'timeout'.

	$ systemctl status firewalld.service | cat
	● firewalld.service - firewalld - dynamic firewall daemon
	   Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
	   Active: failed (Result: timeout) since Tue 2016-05-10 14:58:34 CEST; 3min 7s ago
	  Process: 606 ExecStart=/usr/sbin/firewalld --nofork --nopid (code=killed, signal=TERM)
	 Main PID: 606 (code=killed, signal=TERM)

But when the system is up restarting firewalld works just fine:

	$ time sudo systemctl restart firewalld
	
	real	0m0.355s
	user	0m0.004s
	sys	0m0.000s

	$ systemctl status firewalld.service | cat
	● firewalld.service - firewalld - dynamic firewall daemon
	   Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
	   Active: active (running) since Tue 2016-05-10 15:03:39 CEST; 25s ago
	 Main PID: 2548 (firewalld)
	    Tasks: 2 (limit: 512)
	   CGroup: /system.slice/firewalld.service
		   └─2548 /usr/bin/python3 -Es /usr/sbin/firewalld --nofork --nopid

It cannot be fixed by purging and reinstalling firewalld.

Best regards
Uwe

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (800, 'testing'), (600, 'unstable'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.5.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages firewalld depends on:
ii  dbus                 1.10.8-1
ii  gir1.2-glib-2.0      1.48.0-2
ii  init-system-helpers  1.31
ii  iptables             1.6.0-2
ii  policykit-1          0.105-15
ii  python3-dbus         1.2.4-1
ii  python3-gi           3.20.1-1
ii  python3-slip-dbus    0.6.1-3
pn  python3:any          <none>

Versions of packages firewalld recommends:
ii  ebtables  2.0.10.4-3.4
ii  ipset     6.29-1

firewalld suggests no packages.

-- Configuration Files:
/etc/firewalld/firewalld.conf [Errno 13] Permission denied: u'/etc/firewalld/firewalld.conf'
/etc/firewalld/lockdown-whitelist.xml [Errno 13] Permission denied: u'/etc/firewalld/lockdown-whitelist.xml'

-- no debconf information