From 974c4133be641daeb03afb6d41eb8fb8410f7017 Mon Sep 17 00:00:00 2001
From: Daniel Berteaud <daniel@firewall-services.com>
Date: Thu, 20 Oct 2016 14:31:12 +0200
Subject: [PATCH] Enable firewall by default, with only ssh accessible

---
 el7.ks | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/el7.ks b/el7.ks
index 8670e88..5702187 100644
--- a/el7.ks
+++ b/el7.ks
@@ -6,8 +6,7 @@ timezone Europe/Paris --isUtc
 keyboard --vckeymap=fr-oss --xlayouts='fr (oss)'
 lang fr_FR.UTF-8
 services --enabled ntpd
-services --disable firewalld
-services --disable avahi-daemon
+firewall --enabled --service ssh
 network  --bootproto=dhcp --activate --noipv6
 rootpw --iscrypted $6$6OYBD0R8xuGsqAUl$KVHVrjCM6VmLR13TW0exHAl4toKHxQTd9zwbuYzR/t79heCMrAcVmtBmw0wCcNu5zoz1y3LzwdIZjNedRlz7Y/
 zerombr