Sync from SUSE:SLFO:Main ebtables revision 10266afa0f0d0a217806fa0d1afac843
This commit is contained in:
commit
04814b6411
23
.gitattributes
vendored
Normal file
23
.gitattributes
vendored
Normal file
@ -0,0 +1,23 @@
|
||||
## Default LFS
|
||||
*.7z filter=lfs diff=lfs merge=lfs -text
|
||||
*.bsp filter=lfs diff=lfs merge=lfs -text
|
||||
*.bz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.gem filter=lfs diff=lfs merge=lfs -text
|
||||
*.gz filter=lfs diff=lfs merge=lfs -text
|
||||
*.jar filter=lfs diff=lfs merge=lfs -text
|
||||
*.lz filter=lfs diff=lfs merge=lfs -text
|
||||
*.lzma filter=lfs diff=lfs merge=lfs -text
|
||||
*.obscpio filter=lfs diff=lfs merge=lfs -text
|
||||
*.oxt filter=lfs diff=lfs merge=lfs -text
|
||||
*.pdf filter=lfs diff=lfs merge=lfs -text
|
||||
*.png filter=lfs diff=lfs merge=lfs -text
|
||||
*.rpm filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz filter=lfs diff=lfs merge=lfs -text
|
||||
*.tbz2 filter=lfs diff=lfs merge=lfs -text
|
||||
*.tgz filter=lfs diff=lfs merge=lfs -text
|
||||
*.ttf filter=lfs diff=lfs merge=lfs -text
|
||||
*.txz filter=lfs diff=lfs merge=lfs -text
|
||||
*.whl filter=lfs diff=lfs merge=lfs -text
|
||||
*.xz filter=lfs diff=lfs merge=lfs -text
|
||||
*.zip filter=lfs diff=lfs merge=lfs -text
|
||||
*.zst filter=lfs diff=lfs merge=lfs -text
|
||||
BIN
ebtables-2.0.11.tar.gz
(Stored with Git LFS)
Normal file
BIN
ebtables-2.0.11.tar.gz
(Stored with Git LFS)
Normal file
Binary file not shown.
BIN
ebtables-2.0.11.tar.gz.sig
Normal file
BIN
ebtables-2.0.11.tar.gz.sig
Normal file
Binary file not shown.
304
ebtables.changes
Normal file
304
ebtables.changes
Normal file
@ -0,0 +1,304 @@
|
||||
-------------------------------------------------------------------
|
||||
Thu Nov 11 08:36:14 UTC 2021 - Danilo Spinella <danilo.spinella@suse.com>
|
||||
|
||||
- Add build dependency on libalternatives
|
||||
- Run spec-cleaner
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Oct 15 07:30:28 UTC 2021 - Johannes Segitz <jsegitz@suse.com>
|
||||
|
||||
- Added hardening to systemd service(s) (bsc#1181400). Modified:
|
||||
* ebtables.service
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Aug 20 18:06:09 UTC 2021 - Stefan Schubert <schubi@suse.de>
|
||||
|
||||
- Use libalternatives instead of update-alternatives.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Sep 2 14:23:48 UTC 2020 - Dominique Leuenberger <dimstar@opensuse.org>
|
||||
|
||||
- Have the source .service file hold a placeholder for LIBEXECDIR,
|
||||
which we replace during build/install phase, allowing the package
|
||||
to be used no matter what value %{_libexecdir} has.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 1 12:11:49 UTC 2020 - Kristyna Streitova <kstreitova@suse.com>
|
||||
|
||||
- replace /usr/lib with /usr/libexec in .service files to follow
|
||||
%_libexecdir macro changes
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 5 10:15:21 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
||||
|
||||
- Revert last /bin/bash -> /bin/sh change
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Apr 29 14:05:24 UTC 2020 - Thorsten Kukuk <kukuk@suse.com>
|
||||
|
||||
- Use /bin/sh for ebtables.systemd
|
||||
- Don't hard require systemd, we don't need that in a container
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Jan 10 14:26:56 UTC 2020 - Kristyna Streitova <kstreitova@suse.com>
|
||||
|
||||
- rename /usr/lib/ebtables helper file to /usr/lib/ebtables-helper
|
||||
otherwise it conflicts with /usr/lib/ebtables library directory
|
||||
on 32-bit systems [bsc#1159769]
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Dec 10 14:12:00 UTC 2019 - Kristyna Streitova <kstreitova@suse.com>
|
||||
|
||||
- add ebtables.keyring as a Source
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Dec 2 19:26:41 UTC 2019 - Jan Engelhardt <jengelh@inai.de>
|
||||
|
||||
- Update to release 2.0.11
|
||||
* Add --noflush command line support for ebtables-restore
|
||||
* Do not print IPv6 mask if it is all ones
|
||||
* Allow RETURN target rules in user defined chains
|
||||
* ebt_ip: add support for matching ICMP type and code
|
||||
* ebt_ip: add support for matching IGMP type
|
||||
* extensions: Add string filter to ebtables
|
||||
* Print IPv6 prefixes in CIDR notation
|
||||
* extensions: Add AUDIT target
|
||||
* Fix incorrect IPv6 prefix formatting
|
||||
- Drop ebtables-v2.0.8-makefile.diff (no longer needed)
|
||||
- Drop ebtables-v2.0.8-initscript.diff, include-linux-if.patch
|
||||
(not applicable)
|
||||
- Drop ebtables-v2.0.10-4-audit.patch,
|
||||
0001-fix-compilation-warning.patch,
|
||||
0001-Use-flock-for-concurrent-option.patch,
|
||||
0002-Fix-locking-if-LOCKDIR-does-not-exist.patch (merged)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jul 10 11:30:50 UTC 2019 - Kristyna Streitova <kstreitova@suse.com>
|
||||
|
||||
- fix path (/sbin -> /usr/sbin) in ebtables.systemd [bsc#1140898]
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Feb 22 14:04:30 UTC 2019 - Michał Rostecki <mrostecki@opensuse.org>
|
||||
|
||||
- Add upstream patches which improve handling stale locks.
|
||||
(boo#1126094)
|
||||
* 0001-Use-flock-for-concurrent-option.patch
|
||||
* 0002-Fix-locking-if-LOCKDIR-does-not-exist.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Aug 24 10:20:05 UTC 2018 - jengelh@inai.de
|
||||
|
||||
- Move ebtables to ebtables-legacy and use update-alternatives to
|
||||
offer a selection mechanism.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Mar 15 13:30:35 UTC 2018 - kstreitova@suse.com
|
||||
|
||||
- fix ExecStart/ExecStop path in ebtables.service [bnc#1085228]
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Mar 12 10:08:51 UTC 2018 - matthias.gerstner@suse.com
|
||||
|
||||
- Fix ethertypes ownership, should be %exclude, not %ghost.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Feb 22 16:22:33 UTC 2018 - matthias.gerstner@suse.com
|
||||
|
||||
- Resolve conflict with iptables-nft and obtain ethertypes from new netcfg
|
||||
minor version. FATE#320520
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Nov 23 13:37:47 UTC 2017 - rbrown@suse.com
|
||||
|
||||
- Replace references to /var/adm/fillup-templates with new
|
||||
%_fillupdir macro (boo#1069468)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Mar 23 15:14:46 UTC 2017 - kstreitova@suse.com
|
||||
|
||||
- cleanup with spec-cleaner
|
||||
- get rid of %{name} macros in the patch names
|
||||
- remove sysvinit support
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri May 6 10:43:55 UTC 2016 - p.drouand@gmail.com
|
||||
|
||||
- Add systemd support for openSUSE > 12.10
|
||||
- Do not depend on fillup when building with sysvinit support; the
|
||||
package doesn't provide any sysconfig file
|
||||
- Change Requires(post) tag for Requires(pre); sysvinit must be
|
||||
available before the package installation, according to the policy
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Apr 26 12:13:47 UTC 2016 - kstreitova@suse.com
|
||||
|
||||
- add "Requires(post): %insserv_prereq %fillup_prereq" to fix
|
||||
problem with missing sed during the installation [bnc#976919]
|
||||
- remove non-break space from specfile
|
||||
- use spec-cleaner to clean the specfile
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Aug 29 15:07:16 UTC 2015 - bwiedemann@suse.com
|
||||
|
||||
- fix compilation
|
||||
add include-linux-if.patch 0001-fix-compilation-warning.patch
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Jun 16 11:19:33 UTC 2015 - kstreitova@suse.com
|
||||
|
||||
- add ebtables-v2.0.10-4-audit.patch needed for CC certification
|
||||
[bnc#934680]
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Nov 13 18:52:25 UTC 2014 - dimstar@opensuse.org
|
||||
|
||||
- Also save include/linux/netfilter_bridge/ebt_ulog.h, as it no
|
||||
longer exists in the mainline kernel.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue Sep 23 15:28:21 UTC 2014 - jengelh@inai.de
|
||||
|
||||
- Remove support for old distros from specfile
|
||||
(prjconf can do substitutions instead)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Feb 28 08:42:42 UTC 2014 - vcizek@suse.com
|
||||
|
||||
- add missing BuildRequires: sed (bnc#865848)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Dec 19 10:08:54 UTC 2012 - jengelh@inai.de
|
||||
|
||||
- Have build succeed on non-SUSE
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Dec 15 21:44:32 UTC 2011 - jengelh@medozas.de
|
||||
|
||||
- Update to new upstream release 2.0.10.4
|
||||
* previous counter bug was still present and has been addressed now
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Dec 4 16:27:22 UTC 2011 - jengelh@medozas.de
|
||||
|
||||
- Update to new upstream release 2.0.10.3
|
||||
* fix a counter setting bug
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Aug 11 23:23:35 UTC 2011 - jengelh@medozas.de
|
||||
|
||||
- Update to new upstream release 2.0.10.2
|
||||
* minor compilation fixes: respect LDFLAGS in Makefiles
|
||||
- Remove obsolete ebtables-typepuns.diff patch (fixed upstream)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sun Jul 10 23:03:57 UTC 2011 - jengelh@medozas.de
|
||||
|
||||
- update to 2.0.10.1
|
||||
* fix --among-dst-file, which translated to --among-src
|
||||
* Makefile: respect LDFLAGS during ebtables build
|
||||
* Makefile: create directories to avoid build failure when DESTDIR
|
||||
is supplied
|
||||
* incorporate fixes for possible issues found by Coverity analysis
|
||||
* extend ebt_ip6 to allow matching on ipv6-icmp types/codes
|
||||
* add --concurrent option, which enables using a file lock to
|
||||
support concurrent scripts updating the ebtables kernel tables
|
||||
- run spec-beautifier over specfile
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jun 6 11:18:31 UTC 2011 - puzel@novell.com
|
||||
|
||||
- update to 2.0.9-2
|
||||
* fix unwanted zeroing of counters in the last user-defined chain
|
||||
* fix hidden symbol compilation error when using ld directly
|
||||
* fix return value checking of creat to give a correct error
|
||||
message if the atomic file couldn't be created
|
||||
* correct info in INSTALL about compilation of ulog
|
||||
- use spec-cleaner
|
||||
- update ebtables-v2.0.8-makefile.diff
|
||||
- license is GPLv2, not GPLv2+
|
||||
- package COPYING and ChangeLog files
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Tue May 31 12:34:34 UTC 2011 - lnussel@suse.de
|
||||
|
||||
- cleanup up initscript
|
||||
* don't use /var/lock/subsys
|
||||
* read /etc/sysconfig/ebtables for setting and restore state from
|
||||
/etc/ebtables where the script actually saved the state to.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Mar 18 07:09:55 UTC 2010 - coolo@novell.com
|
||||
|
||||
- use rc_status (uncredited change)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Mon Jan 25 23:19:23 CET 2010 - jengelh@medozas.de
|
||||
|
||||
- Switch to SUSE_ASNEEDED=0 to fix segmentation fault/NULL dereference
|
||||
(caused by plugins not being loaded, due to them not being linked in)
|
||||
[bnc#567267]
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jan 6 13:52:39 CET 2010 - prusnak@suse.cz
|
||||
|
||||
- update to 2.0.9-1
|
||||
* added ip6 module for filtering IPv6 traffic
|
||||
* added --log-ip6 option for logging IPv6 traffic
|
||||
* added nflog watcher for logging packets to userspace
|
||||
* bugfix in ebtables.sysv
|
||||
* bugfix for among match on x86-64
|
||||
- fix scriptlets in spec
|
||||
- fix init script
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Sat Aug 30 21:21:06 CEST 2008 - cthiel@suse.de
|
||||
|
||||
- fix init script
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 24 18:55:52 CEST 2007 - ro@suse.de
|
||||
|
||||
- fix build (use gcc not ld directly)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Oct 17 16:17:18 CEST 2007 - prusnak@suse.cz
|
||||
|
||||
- fixed specfile not to include debug files in normal package
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Oct 12 16:13:57 CEST 2007 - prusnak@suse.cz
|
||||
|
||||
- update to 2.0.8-2
|
||||
* add sysconfig support (ebtables-save, ebtables-restore, etc)
|
||||
* add ulog watcher
|
||||
* use shared libraries (making the code easily usable by third parties)
|
||||
* improve speed
|
||||
* bugfixes, dccp and sctp support
|
||||
- dropped obsolete patches:
|
||||
* gcc.diff (included in update)
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Aug 9 16:27:37 CEST 2007 - olh@suse.de
|
||||
|
||||
- remove private include/linux/ files
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jan 25 21:35:40 CET 2006 - mls@suse.de
|
||||
|
||||
- converted neededforbuild to BuildRequires
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Wed Jun 29 18:12:37 CEST 2005 - meissner@suse.de
|
||||
|
||||
- use RPM_OPT_FLAGS.
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Thu Apr 21 16:05:31 CEST 2005 - postadal@suse.cz
|
||||
|
||||
- fixed for gcc 4.0
|
||||
|
||||
-------------------------------------------------------------------
|
||||
Fri Jun 18 16:52:46 CEST 2004 - postadal@suse.cz
|
||||
|
||||
- new package v2.0.6
|
||||
|
||||
107
ebtables.keyring
Normal file
107
ebtables.keyring
Normal file
@ -0,0 +1,107 @@
|
||||
pub 4096R/0xA4111F89BB5F58CC 2010-10-21 [expires: 2015-10-20]
|
||||
Key fingerprint = 57FF 5E9C 9AA6 7A86 0B55 7AF7 A411 1F89 BB5F 58CC
|
||||
uid [ expired] Netfilter Core Team <coreteam@netfilter.org>
|
||||
sub 4096R/0x0FD3A13A04B92F5C 2010-10-21 [expires: 2015-10-20]
|
||||
|
||||
pub 4096R/0xAB4655A126D292E4 2015-10-19 [expires: 2020-10-17]
|
||||
Key fingerprint = C09D B206 3F1D 7034 BA61 52AD AB46 55A1 26D2 92E4
|
||||
uid [ unknown] Netfilter Core Team <coreteam@netfilter.org>
|
||||
sub 4096R/0xE3B0B6BAE3AAA39E 2015-10-19 [expires: 2020-10-17]
|
||||
|
||||
-----BEGIN PGP PUBLIC KEY BLOCK-----
|
||||
|
||||
mQINBEzAS5EBEADVlGm+KwODJcVmP33HTCbn/eP8obZbgu+3Z1CYRklF8V43vC6D
|
||||
8Jfk7fjD4/gWbAKZxriOESXVAN7mp0Fho4+Ga+pxWeLIET9tVM5xbNFK1p9R3XCK
|
||||
p5SrugG+tGhizTR9b/1YCMVRz/yX3aDtC7lwObas4hkr5BqhphjvlkjFE7us32by
|
||||
43LPpFj2yUpp1VdOf6gxl03kAgJg08h9J7a+n9KHQeAhIpXSRFq3tXiTdXQlovsv
|
||||
ckwBjO0m8P2d1Z8/UYwXQgXzuO8W8EqaUSR95nDwl7UnilnKJm2fGvNg3A6PfCSk
|
||||
3KdeEBZ45SRfMTPsuC5C4T0Az75h3HFR6YSae46ymg7d4ZA/Bd5K4hvp4PdYrfCi
|
||||
GXen7iK9q5XDpopWb0yCrEVJzKjBjDurvpLtAD0IFWcpB6zwM38AnxVH05J8QOx/
|
||||
VCZ4vZJxTKWbpHbdcISSMmVt00VfKorF9DsjiAcBRMBcIvDpJTP4yjvr32W09wLc
|
||||
d5CIYGrLKhLNysUIJ44AQoTL9yV5aQvCb2EFnoPqCEKQm8onTAGX19PpTDjDPJFt
|
||||
WyMMUDtiMp2yODuFo1qHjxvqzSVX+Ti2sGpiT1hEz97GAIlbAvmXs/bTb+U+rBnd
|
||||
6027ooes3cWmBSV5kpz/sMp+nFynrLZ5NDnehPScz3W31oGgSdrGsnnhaQARAQAB
|
||||
tCxOZXRmaWx0ZXIgQ29yZSBUZWFtIDxjb3JldGVhbUBuZXRmaWx0ZXIub3JnPokC
|
||||
PgQTAQIAKAUCTMBLkQIbAwUJCWYBgAYLCQgHAwIGFQgCCQoLBBYCAwECHgECF4AA
|
||||
CgkQpBEfibtfWMzULxAAtGgYeuEqk0F9y4sz6hFJf+fXKSPPrwWTIUXs/sCxlBtS
|
||||
lgf9oTvk3aT48zsMIfsDsS8yfIUjaK+eedIZW3oJ0lBtwRncZKjks8Od5J7DvEhR
|
||||
Kpo3cajT1KXJh584IvXN0/BbCdPUI6EQE8n0fEUrSWANfzhuD3qYtX9UUGBq/7i8
|
||||
Cf3pGFDeYRjcwWeNZ1T+xbaCKPS5BGlOVhMtauaTBZvTJniB828bOZXd3KrXUeul
|
||||
AicbzZzqU7XcNX2YKw19MTQzuGNZQ3npJUPQiHgyELTh3+YUmRkPaZaZiDNZeQvu
|
||||
/j8cgSoa26Q48apjghREo0Ues4MwQwEGBbdVkEQQMuC9ASti3OyZBTOqyApc2rpE
|
||||
VsW2CkqvoQ8jaP51Ua4mjerYkqEqXaVtbPelNFMJXGNXrKdf0xg5Nl/onWnT9S/s
|
||||
jtR3LtjOQ0apbBiGPROtYKWSQtA55TgYNLLS1+947TvU134Px1FA8Dqi72SBl7Xc
|
||||
ET4nwISO222wMJBxbY4MYB2TppMysIKXUazIyekbRkpK1woH4AR6NsuJOiVdhjEi
|
||||
46MkN7tmHI9S9blA98Ih6C9hMz2YgmQEwOQ0qYgVruPdYZSP+M5o+pra9ch+STBk
|
||||
FbB03L9kqcAAE8wpGSBRYU+KuyVRipnPeqoeR8niO71AiKbsfbL1skTGRafC2Q+5
|
||||
Ag0ETMBLkQEQANNv2Ymm/BVxwqb1vrLq1scoWK5kmeaRD3ndMBv9F3xwqGnE/JTn
|
||||
HnVoZIzGb8MD+MCe9jfm8Y+NLU0D71NpDDqRzFZCCjcTmRMYV6QXlsg/ndnSaU1b
|
||||
hG0gSq4N+qZFZ+35yiY5pYv1qZkIqWr4/vg9mk53CU620bNgNJ1+F19s/eTw1231
|
||||
pJ6K6BsDi7pj4LXGD5wHZPKAmLabFweCkGbGQo6VwWw1ieNJ0igvzkZtVXuvoeHU
|
||||
mAitCaZT9AIYDl4PHryckIzjgTdhK0PP92fyHV64Yr3B7G6hWlEwq4wKk9irdgqD
|
||||
20Fuqw8Cvv6k1YucWfdpNbZkUI3siQE+1HUUuRTcT8yrPcEA5ZM1/U+e8jBT3EAr
|
||||
hk69G6LCfwyX2Xd/JGlBmc0Qv0t2YKqj9Io1G5lBN1q57+vK7ttiIUomwvfD2ltY
|
||||
0bdcEr5LjXOk3Sb+OPIVm7+vr6hDMKdUpdm5ABZRSUb0RJ37hBT+DKYbnp0t/e3a
|
||||
MXxV9m3jUq8hNdwc8vU1khr9kf+MWPonE0Vw2kqHIIb4I5W9HkMJf4Vzj9/hVPMI
|
||||
ucV+2de/7zqxwa0Jh5VSD7SeKj7LznsAy9gi/AioYq4AKVTsigfyJlWpjOLeOvv7
|
||||
z4uUfLRQ5OWWfX8BBw8SoPwnWQD4cXHkrHXVwYR2yy7pEc1CstUN+uqXABEBAAGJ
|
||||
AiUEGAECAA8FAkzAS5ECGwwFCQlmAYAACgkQpBEfibtfWMyLqw/6A12S4bnLYaik
|
||||
ToKc13ywTUsHplbmlLOy2E/5ZMksdfuWjh9XTMR0nbXWnFULxGKTP00kA0yVpv/j
|
||||
beDY/qLzY2Yb0rROCQJjuWSLYuNW40+Hmh9TGsDWt7iK3XsONVpV0sRsMOBCwV3k
|
||||
2EsFXu73Fj+1JvQ+WSGluj+N7HFAqPi5OFk3IFFnIGhScUz22V6meSaOEqiXLySg
|
||||
qh3lv7+XuGzoBjdy7dDm+SnbmK9lO1IqPsIm4iDwmTNJBiu1Wrz319kLYA0/Vx+o
|
||||
fmxyViOX1GZShb1mGH0Aeo4jeYmDNLXapkoymC3HCIMctYDmuIw6QlgG8i1LRcFh
|
||||
VKMngLjZ17dl/w8gYOdkCsGIUBzvbFBhxuJnXMnFVyDxft/lorMAimH2kbjDn6qa
|
||||
H0uV8ILfFVe6gnKzanugmaSQjWzby/ARPhs6OYAXoIUv5MUVDgvTzVmTckWjVa1R
|
||||
kMm3eGmDSqoMxsPmarb80nkoFQMOPhJWlyaUCt6HHRYuSkIcxY4H4Ni3Oq1s1R9/
|
||||
EqUuIfxNv7Kp0mcsE2KvANc3JfB9wXwLWqDYRCifLkCD6pbpt9L/+xQ49VzcFxNO
|
||||
9DqTyk4N7cz7OZrAi+ouVrdFuiwnZyn5YSQoof6Pos58b3bkFn14m9gofwTqGzPh
|
||||
R4Vot9rRu5zrWdoCM4cRThpJyrjqBMuZAg0EViV2IwEQALrfnP0L2QbpXPN1Yg7w
|
||||
ESbOMnp3B7nIyeVmo3mvYI/mH0GtEHcFbigsUt4nIXCxI/ppB5NQH/GR8EbTUbq2
|
||||
OycNaIRWSDYHX+LDijyZ9NO6m8wbQODdhjroK7q8rHzO8Vp+reNzPM2nY7Uh3w3s
|
||||
dPrOERGYeZld1nDyN20ko2Zg4fIJIwVJaHwv4L1j9GYAKp6ACnyG81+VA9adPNCi
|
||||
9YyIbET/3/bWkl86AS78rLY7fFo5s2BZn0gvFzCB/q9v/dKYs6e5aX7DUeF2q4OW
|
||||
/J7vJjITXGum7ydRC3Neov8PdeNAbBfciznWvnTyArExjgTiHwqQOIDnW4dEJtJw
|
||||
iNP50rVKb5DZI3/YokZ5AAQV70ZZemL/5vfGl6a77wvuUFcKFtiQq3JYvt3oWcBO
|
||||
zyWbd7L1McwAbOOeSXS9hGWuWHjzFuQl7igdJAXs4GRCgUbM83yTCtmDD11337De
|
||||
diSfrcgtmNpkvfRBkjUKYten6N1jsNBqCevLxw0uFYBeSVl96KJyybMd2Rd7P+tC
|
||||
jtfpPuEvw9AlPqHZKnKQ4c8vp07MCI9JavJ/nola7rCMk0LULC9tttyaOGNSD3vb
|
||||
/t26lXr6qOV60+0lw7xEbdAu8zdEqR/ixKbvn1jbSajTcH3geGL7YakliuctRWTB
|
||||
XYyd8abaKDUzrTES1JJ53xRNABEBAAG0LE5ldGZpbHRlciBDb3JlIFRlYW0gPGNv
|
||||
cmV0ZWFtQG5ldGZpbHRlci5vcmc+iQI+BBMBAgAoBQJWJXYjAhsDBQkJZgGABgsJ
|
||||
CAcDAgYVCAIJCgsEFgIDAQIeAQIXgAAKCRCrRlWhJtKS5NoHEAC6mgfbDygR+Mrb
|
||||
Hg3qbGkgonPjUnYBqkBDz8jgdvFXS3Qm/ANI92qqeLkG+eFusuioIpXg4SHNmyUB
|
||||
oR+B60tApBtzO88iAbCHkjvfz4fqAZpYJ3VzYXIa/ScSoQHj77quNkO9aauikTj4
|
||||
ro6gnMUI2ilN1dv9Fb9/3XYxfyvP7QhWyGRuu9MekaPNjATtw7tDnDBe0C5eHrwX
|
||||
l2ojGxldj2eecoLLYcGw8x4rVDAxlNldh6tNgwc3IQ+4FkIri5sudK4vxDkPbouf
|
||||
srT6xoUe+qAj+9mScUeRFSrrdCCRd2EsBq+jhWS/kOWa0OAi6TKSOXMIdJze84Og
|
||||
R+67m+PNivmZ5+XgSmM/AzN36Lynx8nx7WNThVCd9HViq9kyXI1tQazGU30++Wec
|
||||
ct+7VE2f4aP5ITjd7WlHlEULVjRMBg+mFdz+jfmEncmC41TjWykqvrZWsT98FhNR
|
||||
YiRVsniiNvc7BS8X1qBODovvKg44yF3xEy3uFScHMqwMjiEqtVfQpfZh9PjzX1eA
|
||||
uj9sMF16NnzVeT/n4gKbO8E4vebtIJgzMd19Y0KCxfMxu4rjSHw1T0bYzwOoa9y/
|
||||
ejKM/G/NEnFKzwjySEbG9zlciJXrhb7a2y+YzNvSjEuP8Hs2BLPgJkZtVoiE4UVE
|
||||
9Wb7jNhyUz4RC0FdjRyGItGglyc9IbkCDQRWJXYjARAArK1scDuvvWTEJv+y0Sr3
|
||||
hnM8mnHIK2XNcn4p/d5nO1myCtZWPRVDIQyyXJMntEqrLBMnjxBdQcQkt7o2mJFL
|
||||
yJYO+Xb/9JyH161MPybM60dDXOTTxnAp3dDH4tdL/5snVAyrC93W2PMahK4bdwpM
|
||||
10Cz/FxtcB2xJ7Zoqq3bveN4KSUabsRYJN29BwjKtg392MtJ68SAAWN21feQ/Js9
|
||||
KjDpNoX2Sl9ZoIR2bbIsaGNeti/ciTy43MS/V6KXNTcoYrgySyW/HCNw9KjtvH+g
|
||||
/W/ze0sCXJKLby6oRQfsR2zPBTs9YB92GepG+3j1v+tw4jtbvmLKSse+S5BG8Ue2
|
||||
j3Bxbz4/RECdrlxDe4gX1hi5K/W0159pB65fha+DM3YvKrNouKsqLsxm5DMjDjdE
|
||||
qVQWtPd4tYy4uL2RWcGvvede+tN5rYsBatfelMfTSFN+jxFntwok6YmulnzIDP4O
|
||||
tUjLOpH1ZyNTcXEyAQz51aXcjVuk/6MV64hSEnH1FB7v79Zo9afdmNSKdpXf8nvZ
|
||||
3IO7HnXhpwh3pjWplyalZR7nb7PlIDxHCK6S3EN3lutBX4w9oh03KfrWlfZb2TD/
|
||||
s85uNzbU7TSb8KFC90i9H/qsd1w3kzy4evRJlyFvIqwksYY76huTfpDdx8yabfFY
|
||||
IG2TXc2iMkA7R+oMo+B46kkAEQEAAYkCJQQYAQIADwUCViV2IwIbDAUJCWYBgAAK
|
||||
CRCrRlWhJtKS5IB2D/9eL6TJ82wCrh3Hx+R3YeWVObukEBq4Ho8KRFngvIi+2D14
|
||||
PljWtITPeplDtpXu3E1i7I74F1925xFs7pT6BD65e13/18y4RX5pwGfu0HTJpi3U
|
||||
B47WXlSnyRBLD+/qiKcSCkR1mcKJgyIY9KbA0rr1Drv/3DJR+wBt9Fuww/gxgv7v
|
||||
yIxxrDa2+GESxJc1iLyuKFiDtnUkmJpqtJV0szi38W1NQUwWWF3CWUpqfvn316CJ
|
||||
4cTyuurLn994ceJDherS9tFcYASdmbl6g6PwWgdFrpmb44J7gdBCsB9q2cpjhDbu
|
||||
bgTq7V32CVMBGKOThihJZHIz/LZyuHv9WNYXUNfpEOOUN97C+j6091TSh+5P6oJO
|
||||
E61VMBBL51nw3T0FFKtA9kubKLk08GH75vPLaBqLa5B88Z3nJWdlaJOdgGEz65PU
|
||||
Uh78iWJ3AFAOwhsDEfxFYC+gZWqt9qw3Wyp2eY2q+5ep4KRxuqq3M0V3zXE6z5ff
|
||||
F8CCqRe/yzGAh8RxEmT/Nl+yHEIVv7qpJk6GSvkXr5dN/jyZCiN2fHEhZOBtLvln
|
||||
E5UjMbYOGqk3F8OARHarJ/qARATzqNYdDRe9SKxlbog+k6WWxJ4ivSVmYY28vEWf
|
||||
79IZ79ZHJ0woRi+vr3Cwpc488Sjwi7a/O0HW6zXSaxXNeYR0VnwvcrZrtlCqIQ==
|
||||
=zI6p
|
||||
-----END PGP PUBLIC KEY BLOCK-----
|
||||
19
ebtables.service
Normal file
19
ebtables.service
Normal file
@ -0,0 +1,19 @@
|
||||
[Unit]
|
||||
Description=Ethernet Bridge Filtering tables
|
||||
|
||||
[Service]
|
||||
# added automatically, for details please see
|
||||
# https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort
|
||||
ProtectSystem=full
|
||||
ProtectHome=true
|
||||
ProtectHostname=true
|
||||
ProtectControlGroups=true
|
||||
RestrictRealtime=true
|
||||
# end of automatic additions
|
||||
Type=oneshot
|
||||
RemainAfterExit=yes
|
||||
ExecStart=@LIBEXECDIR@/ebtables-helper start
|
||||
ExecStop=@LIBEXECDIR@/ebtables-helper stop
|
||||
|
||||
[Install]
|
||||
WantedBy=multi-user.target
|
||||
201
ebtables.spec
Normal file
201
ebtables.spec
Normal file
@ -0,0 +1,201 @@
|
||||
#
|
||||
# spec file for package ebtables
|
||||
#
|
||||
# Copyright (c) 2021 SUSE LLC
|
||||
#
|
||||
# All modifications and additions to the file contributed by third parties
|
||||
# remain the property of their copyright owners, unless otherwise agreed
|
||||
# upon. The license for this file, and modifications and additions to the
|
||||
# file, is the same license as for the pristine package itself (unless the
|
||||
# license for the pristine package is not an Open Source License, in which
|
||||
# case the license is the MIT License). An "Open Source License" is a
|
||||
# license that conforms to the Open Source Definition (Version 1.9)
|
||||
# published by the Open Source Initiative.
|
||||
|
||||
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
||||
#
|
||||
|
||||
|
||||
%if 0%{?suse_version} > 1500
|
||||
%bcond_without libalternatives
|
||||
%else
|
||||
%bcond_with libalternatives
|
||||
%endif
|
||||
#Compat macro for new _fillupdir macro introduced in Nov 2017
|
||||
%if ! %{defined _fillupdir}
|
||||
%define _fillupdir %{_localstatedir}/adm/fillup-templates
|
||||
%endif
|
||||
Name: ebtables
|
||||
Version: 2.0.11
|
||||
Release: 0
|
||||
Summary: Ethernet Bridge Tables
|
||||
License: GPL-2.0-or-later
|
||||
Group: Productivity/Networking/Security
|
||||
URL: http://ebtables.sf.net/
|
||||
#Git-Clone: git://git.netfilter.org/ebtables
|
||||
Source0: http://ftp.netfilter.org/pub/ebtables/ebtables-%{version}.tar.gz
|
||||
Source1: http://ftp.netfilter.org/pub/ebtables/ebtables-%{version}.tar.gz.sig
|
||||
Source2: ebtables.keyring
|
||||
Source3: ebtables.service
|
||||
Source4: ebtables.systemd
|
||||
BuildRequires: linux-glibc-devel >= 2.6.20
|
||||
BuildRequires: sed
|
||||
BuildRequires: systemd-rpm-macros
|
||||
BuildRequires: xz
|
||||
Requires: netcfg >= 11.6
|
||||
Requires(pre): %fillup_prereq
|
||||
%{?systemd_ordering}
|
||||
%if %{with libalternatives}
|
||||
BuildRequires: alts
|
||||
Requires: alts
|
||||
%else
|
||||
Requires(post): update-alternatives
|
||||
Requires(postun):update-alternatives
|
||||
%endif
|
||||
|
||||
%description
|
||||
A firewalling tool to transparently filter network traffic passing a
|
||||
bridge. The filtering possibilities are limited to link layer filtering
|
||||
and some basic filtering on higher network layers. The ebtables tool
|
||||
can be used together with the other Linux filtering tools, like
|
||||
iptables. There are no incompatibility issues.
|
||||
|
||||
%package -n libebtc0
|
||||
Summary: Library for the ebtables low-level ruleset generation and parsing
|
||||
Group: System/Libraries
|
||||
|
||||
%description -n libebtc0
|
||||
libebtc ("ebtables cache") is used to retrieve from the kernel, parse,
|
||||
construct, and load rulesets into the kernel.
|
||||
|
||||
%prep
|
||||
%autosetup -p1
|
||||
|
||||
# delete all kernel headers, but keep ebt_ip6.h and ebt_nflog.h
|
||||
mv include/linux/netfilter_bridge/ebt_ip6.{h,h.save}
|
||||
mv include/linux/netfilter_bridge/ebt_nflog.{h,h.save}
|
||||
mv include/linux/netfilter_bridge/ebt_ulog.{h,h.save}
|
||||
rm -f include/linux/*.h
|
||||
rm -f include/linux/netfilter_bridge/*.h
|
||||
mv include/linux/netfilter_bridge/ebt_ip6.{h.save,h}
|
||||
mv include/linux/netfilter_bridge/ebt_nflog.{h.save,h}
|
||||
mv include/linux/netfilter_bridge/ebt_ulog.{h.save,h}
|
||||
|
||||
%build
|
||||
# The way ebtables is built requires ASNEEDED=0 forever [bnc#567267]
|
||||
export SUSE_ASNEEDED=0
|
||||
%configure
|
||||
%make_build
|
||||
|
||||
%install
|
||||
# The way ebtables is built requires ASNEEDED=0 forever [bnc#567267]
|
||||
export SUSE_ASNEEDED=0
|
||||
mkdir -p "%{buildroot}/%{_sysconfdir}/init.d"
|
||||
%make_install
|
||||
mkdir -p %{buildroot}%{_fillupdir}
|
||||
mkdir -p %{buildroot}%{_unitdir}
|
||||
install -p %{_sourcedir}/ebtables.service %{buildroot}%{_unitdir}/
|
||||
sed -i "s|@LIBEXECDIR@|%{_libexecdir}|g" %{buildroot}%{_unitdir}/*.service
|
||||
chmod -x %{buildroot}%{_unitdir}/*.service
|
||||
mkdir -p %{buildroot}%{_libexecdir}
|
||||
install -m0755 %{_sourcedir}/ebtables.systemd %{buildroot}%{_libexecdir}/%{name}-helper
|
||||
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
|
||||
touch %{buildroot}%{_fillupdir}/sysconfig.%{name}.filter
|
||||
touch %{buildroot}%{_fillupdir}/sysconfig.%{name}.nat
|
||||
touch %{buildroot}%{_fillupdir}/sysconfig.%{name}.broute
|
||||
rm -rfv %{buildroot}%{_initddir}
|
||||
# not used
|
||||
rm -f "%{buildroot}/%{_sysconfdir}/ebtables-config"
|
||||
for i in ebtables ebtables-restore ebtables-save; do
|
||||
%if ! %{with libalternatives}
|
||||
ln -fsv "%{_sysconfdir}/alternatives/$i" "%{buildroot}/%{_sbindir}/$i"
|
||||
%else
|
||||
ln -fsv %{_bindir}/alts "%{buildroot}/%{_sbindir}/$i"
|
||||
%endif
|
||||
done
|
||||
echo ".so ebtables-legacy.8" >"%{buildroot}/%{_mandir}/man8/ebtables.8"
|
||||
# no headers to make use of it
|
||||
rm -f "%{buildroot}/%{_libdir}/libebtc.la" "%{buildroot}/%{_libdir}/libebtc.so"
|
||||
|
||||
%if %{with libalternatives}
|
||||
mkdir -p %{buildroot}%{_datadir}/libalternatives/ebtables
|
||||
cat > %{buildroot}%{_datadir}/libalternatives/ebtables/1.conf <<EOF
|
||||
binary=%{_sbindir}/ebtables-legacy
|
||||
group=ebtables, ebtables-restore, ebtables-save
|
||||
EOF
|
||||
mkdir -p %{buildroot}%{_datadir}/libalternatives/ebtables-restore
|
||||
cat > %{buildroot}%{_datadir}/libalternatives/ebtables-restore/1.conf <<EOF
|
||||
binary=%{_sbindir}/ebtables-legacy-restore
|
||||
group=ebtables, ebtables-restore, ebtables-save
|
||||
EOF
|
||||
mkdir -p %{buildroot}%{_datadir}/libalternatives/ebtables-save
|
||||
cat > %{buildroot}%{_datadir}/libalternatives/ebtables-save/1.conf <<EOF
|
||||
binary=%{_sbindir}/ebtables-legacy-save
|
||||
group=ebtables, ebtables-restore, ebtables-save
|
||||
EOF
|
||||
%endif
|
||||
|
||||
%pre
|
||||
%if %{with libalternatives}
|
||||
# removing old update-alternatives entries
|
||||
if [ "$1" -gt 0 ] && [ -f %{_sbindir}/update-alternatives ] ; then
|
||||
update-alternatives --remove ebtables "%{_sbindir}/ebtables-legacy"
|
||||
fi
|
||||
%endif
|
||||
%service_add_pre %{name}.service
|
||||
|
||||
%post
|
||||
%if ! %{with libalternatives}
|
||||
update-alternatives --force \
|
||||
--install "%{_sbindir}/ebtables" ebtables "%{_sbindir}/ebtables-legacy" 1 \
|
||||
--slave "%{_sbindir}/ebtables-restore" ebtables-restore "%{_sbindir}/ebtables-legacy-restore" \
|
||||
--slave "%{_sbindir}/ebtables-save" ebtables-save "%{_sbindir}/ebtables-legacy-save"
|
||||
%endif
|
||||
%service_add_post %{name}.service
|
||||
%fillup_only
|
||||
|
||||
%preun
|
||||
%service_del_preun %{name}.service
|
||||
|
||||
%postun
|
||||
%if ! %{with libalternatives}
|
||||
if test "$1" = 0; then
|
||||
update-alternatives --remove ebtables "%{_sbindir}/ebtables-legacy"
|
||||
fi
|
||||
%endif
|
||||
%service_del_postun %{name}.service
|
||||
|
||||
%post -n libebtc0 -p /sbin/ldconfig
|
||||
%postun -n libebtc0 -p /sbin/ldconfig
|
||||
|
||||
%files
|
||||
%license COPYING
|
||||
%doc ChangeLog
|
||||
%{_mandir}/man8/ebtables*.8%{?ext_man}
|
||||
%{_libexecdir}/%{name}-helper
|
||||
%{_unitdir}/%{name}.service
|
||||
%if ! %{with libalternatives}
|
||||
%ghost %{_sysconfdir}/alternatives/ebtables
|
||||
%ghost %{_sysconfdir}/alternatives/ebtables-restore
|
||||
%ghost %{_sysconfdir}/alternatives/ebtables-save
|
||||
%else
|
||||
%dir %{_datadir}/libalternatives
|
||||
%dir %{_datadir}/libalternatives/ebtables
|
||||
%dir %{_datadir}/libalternatives/ebtables-restore
|
||||
%dir %{_datadir}/libalternatives/ebtables-save
|
||||
%{_datadir}/libalternatives/ebtables/1.conf
|
||||
%{_datadir}/libalternatives/ebtables-restore/1.conf
|
||||
%{_datadir}/libalternatives/ebtables-save/1.conf
|
||||
%endif
|
||||
%ghost %{_fillupdir}/sysconfig.%{name}.filter
|
||||
%ghost %{_fillupdir}/sysconfig.%{name}.nat
|
||||
%ghost %{_fillupdir}/sysconfig.%{name}.broute
|
||||
# is provided by the netcfg package
|
||||
%exclude %{_sysconfdir}/ethertypes
|
||||
%{_sbindir}/ebtables*
|
||||
%{_sbindir}/rcebtables
|
||||
|
||||
%files -n libebtc0
|
||||
%{_libdir}/libebtc.so.0*
|
||||
|
||||
%changelog
|
||||
74
ebtables.systemd
Normal file
74
ebtables.systemd
Normal file
@ -0,0 +1,74 @@
|
||||
#!/bin/bash
|
||||
|
||||
RETVAL=0
|
||||
|
||||
initialize() {
|
||||
# Initialize $TYPE tables
|
||||
echo -n $" $TYPE tables: "
|
||||
if [ -r /etc/sysconfig/ebtables.$TYPE ]; then
|
||||
/usr/sbin/ebtables -t $TYPE --atomic-file /etc/sysconfig/ebtables.$TYPE --atomic-commit > /dev/null || RETVAL=1
|
||||
else
|
||||
echo -n "not configured"
|
||||
fi
|
||||
if [ $RETVAL -eq 0 ]; then
|
||||
echo -n $"[ OK ]"
|
||||
echo -ne "\r"
|
||||
else
|
||||
echo -n $"[FAILED]"
|
||||
echo -ne "\r"
|
||||
fi
|
||||
}
|
||||
|
||||
case $1 in
|
||||
start)
|
||||
# Initialize filter tables
|
||||
TYPE=filter
|
||||
initialize
|
||||
|
||||
# Initialize NAT tables
|
||||
echo
|
||||
TYPE=nat
|
||||
initialize
|
||||
|
||||
# Initialize broute tables
|
||||
echo
|
||||
TYPE=broute
|
||||
initialize
|
||||
;;
|
||||
stop)
|
||||
/usr/sbin/ebtables -t filter --init-table || RETVAL=1
|
||||
/usr/sbin/ebtables -t nat --init-table || RETVAL=1
|
||||
/usr/sbin/ebtables -t broute --init-table || RETVAL=1
|
||||
|
||||
for mod in $(grep -E '^(ebt|ebtable)_' /proc/modules | cut -f1 -d' ') ebtables; do
|
||||
/usr/sbin/rmmod $mod || RETVAL=1
|
||||
done
|
||||
|
||||
if [ $RETVAL -eq 0 ]; then
|
||||
echo -n $"[ OK ]"
|
||||
echo -ne "\r"
|
||||
else
|
||||
echo -n $"[FAILED]"
|
||||
echo -ne "\r"
|
||||
fi
|
||||
;;
|
||||
save)
|
||||
echo -n $"Saving Ethernet bridge filtering (ebtables): "
|
||||
/usr/sbin/ebtables -t filter --atomic-file /etc/sysconfig/ebtables.filter --atomic-save || RETVAL=1
|
||||
/usr/sbin/ebtables -t nat --atomic-file /etc/sysconfig/ebtables.nat --atomic-save || RETVAL=1
|
||||
/usr/sbin/ebtables -t broute --atomic-file /etc/sysconfig/ebtables.broute --atomic-save || RETVAL=1
|
||||
if [ $RETVAL -eq 0 ]; then
|
||||
echo -n $"[ OK ]"
|
||||
echo -ne "\r"
|
||||
else
|
||||
echo -n $"[FAILED]"
|
||||
echo -ne "\r"
|
||||
fi
|
||||
;;
|
||||
*)
|
||||
echo "usage: ${0##*/} {start|stop|save}" >&2
|
||||
exit 1
|
||||
;;
|
||||
esac
|
||||
|
||||
# vim:set ts=2 sw=2 ft=sh et:
|
||||
Loading…
Reference in New Issue
Block a user