From bb3b98d50590bdb75ef0c1294621a6f60f50a66b Mon Sep 17 00:00:00 2001
From: Dusty Mabe <dusty@dustymabe.com>
Date: Fri, 12 Jan 2018 14:57:47 -0500
Subject: [PATCH] atomic: add comment on why we disable firewall

In cloud Images we do this becaue it's generally accepted that
in a cloud environment there are higher level firewall constructs
(i.e. security groups).
---
 fedora-atomic.ks | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/fedora-atomic.ks b/fedora-atomic.ks
index 26e5353..e9c5848 100644
--- a/fedora-atomic.ks
+++ b/fedora-atomic.ks
@@ -25,6 +25,8 @@ auth --useshadow --passalgo=sha512
 selinux --enforcing
 rootpw --lock --iscrypted locked
 
+# Explicitly disable firewall since cloud providers generally provide
+# higher level firewall constructs (i.e. security groups).
 firewall --disabled
 
 # console=ttyAMA0 and console=hvc0 as kernel boot parameter to see