Firewalld add "flags owner,persist" in fedora 42

Ask Fedora
1

I have upgraded to fedora 42. Firewalld add “flags owner,persist” in nft ruleset. When I add rule with nft command, it errors:
Error: Could not process rule: Operation not permitted.
How to remove flags?

2 
sudo busctl set-property \
    org.fedoraproject.FirewallD1 /org/fedoraproject/FirewallD1/config \
    org.fedoraproject.FirewallD1.config NftablesTableOwner s no
sudo firewall-cmd --reload

Safer options:

  • Use native syntax such as rich language.
  • Implement customization in a separate table.
3

Thanks. I change /etc/firewalld/firewalld.conf, NftablesTableOwner=no. It’s OK now.
But NftablesTableOwner=yes in fedora41, why it has no effect?

5

This was not supported by older nftables.

Probably not so trivial in your case.