From a03353cb87b5ca203d3fc899bc8b5d2732128657a62f1b92d7a627eaab7831a0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Adrian=20Schr=C3=B6ter?= Date: Fri, 3 May 2024 15:18:46 +0200 Subject: [PATCH] Sync from SUSE:SLFO:Main libnetfilter_conntrack revision b73fa3c4c25799f7992678c6659cb8f8 --- .gitattributes | 23 ++++ baselibs.conf | 1 + libnetfilter_conntrack-1.0.9.tar.bz2 | 3 + libnetfilter_conntrack-1.0.9.tar.bz2.sig | Bin 0 -> 566 bytes libnetfilter_conntrack.changes | 151 +++++++++++++++++++++++ libnetfilter_conntrack.keyring | 64 ++++++++++ libnetfilter_conntrack.spec | 90 ++++++++++++++ 7 files changed, 332 insertions(+) create mode 100644 .gitattributes create mode 100644 baselibs.conf create mode 100644 libnetfilter_conntrack-1.0.9.tar.bz2 create mode 100644 libnetfilter_conntrack-1.0.9.tar.bz2.sig create mode 100644 libnetfilter_conntrack.changes create mode 100644 libnetfilter_conntrack.keyring create mode 100644 libnetfilter_conntrack.spec diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/baselibs.conf b/baselibs.conf new file mode 100644 index 0000000..ae20a01 --- /dev/null +++ b/baselibs.conf @@ -0,0 +1 @@ +libnetfilter_conntrack3 diff --git a/libnetfilter_conntrack-1.0.9.tar.bz2 b/libnetfilter_conntrack-1.0.9.tar.bz2 new file mode 100644 index 0000000..581a149 --- /dev/null +++ b/libnetfilter_conntrack-1.0.9.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:67bd9df49fe34e8b82144f6dfb93b320f384a8ea59727e92ff8d18b5f4b579a8 +size 373177 diff --git a/libnetfilter_conntrack-1.0.9.tar.bz2.sig b/libnetfilter_conntrack-1.0.9.tar.bz2.sig new file mode 100644 index 0000000000000000000000000000000000000000000000000000000000000000..3b41ea6d8298b678a63252264e9dff64a03f3a67c609cf8b94deea6dea114262 GIT binary patch literal 566 zcmV-60?GY}0y6{v0SW*e79j*T*<`H1NrA^z0Q;NOU6+cA6d>dU0%8g^cmN6s5Y=6m zii#8<aPNf>`6kMI?4b!+5 zqv12Yr_pj$6qvMVsAwIBf>hd3QIVoBrMs^GF@At$42;|0s{YV9TzM?kN04_;ZhG28?)Ix3itu%GPec=Oy%U6>&w zV>8yJv&-AKRZ{YOg2Rl@BwYLBRJLTJvm>YreBjkgqC%W-76P>3>?2buVF`uLHc}%E zdNOCps|{o|EajwE+z8aLuf==fc0$Xm-OuZWLY&PC@NrDs`e?*PDAjU6?6KWyObK*7 zMS0Tc?x?NI_YZfk8!X12Xa5lvVe9Y}PLJ5W^S9ol-b8MLg9(9Wqg% + +- Update to release 1.0.9 + * This release comes with the new nfct_nlmsg_build_filter() + function that allows to add metadata for kernel-side + filtering of conntrack entries during conntrack table dump. + * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER + argument, it allows to flush only IPv6 or IPv4 entries from + the connection tracking table. + +------------------------------------------------------------------- +Wed Oct 14 00:03:42 UTC 2020 - Jan Engelhardt + +- Modernize specfile constructs. + +------------------------------------------------------------------- +Wed Apr 1 18:51:24 UTC 2020 - Jan Engelhardt + +- Update to release 1.0.8 + * conntrack: support for IPS_OFFLOAD + +------------------------------------------------------------------- +Tue May 1 12:29:12 UTC 2018 - jengelh@inai.de + +- Update to new upstream release 1.0.7 + * new synproxy support + * don't crash on NULL labelmap + * expose a copy of nf_conntrack_common.h + +------------------------------------------------------------------- +Mon Aug 22 11:08:53 UTC 2016 - jengelh@inai.de + +- Update to new upstream release 1.0.6 +* add support for IPv6 NAT +* conntrack: add zone attribute to tuple + +------------------------------------------------------------------- +Wed Sep 9 16:23:58 UTC 2015 - jengelh@inai.de + +- Update to new upstream release 1.0.5 +* conntrack: add mark event filter +* conntrack: compare: relax MARK/ZONE attribute comparison + +------------------------------------------------------------------- +Mon Dec 8 23:44:17 UTC 2014 - jengelh@inai.de + +- Drop %version from subincludedir, it tends to break recompiles of + already-built trees on library updates. + +------------------------------------------------------------------- +Tue Sep 23 15:45:35 UTC 2014 - jengelh@inai.de + +- Drop gpg-offline build-time requirement; this is now handled by + the local source validator + +------------------------------------------------------------------- +Wed Aug 7 13:09:48 UTC 2013 - jengelh@inai.de + +- Update to new upstream release 1.0.4 +* This release includes connlabel support, one memleak fix and + fixes in the comparison API. + +------------------------------------------------------------------- +Mon Mar 4 19:17:33 UTC 2013 - jengelh@inai.de + +- Update to new upstream release 1.0.3 +* Treat the ATTR_HELPER_INFO attribute as the variable-length type + that it actually is. +* Fix a use after free when nfct_clone was used with certain + attribute data types. + +------------------------------------------------------------------- +Wed Nov 28 20:12:14 CET 2012 - sbrabec@suse.cz + +- Verify GPG signature + +------------------------------------------------------------------- +Mon Oct 8 12:14:54 UTC 2012 - jengelh@inai.de + +- Update to new upstream release 1.0.2 +* This release provides new interfaces to interact with libmnl, + and also has several fixes. + +------------------------------------------------------------------- +Sat May 19 22:08:36 UTC 2012 - jengelh@inai.de + +- Update to new upstream release 1.0.1 +* add NAT, expectfn and class support +* conntrack: add new ATTR_GRP_[ORIG|REPL]_ADDR_[SRC|DST] attributes + +------------------------------------------------------------------- +Wed Jan 4 18:28:21 UTC 2012 - jengelh@medozas.de + +- Update to new upstream release 1.0.0 +* build and compilation updates +* expect: fix missing parsing of master tuple +* expect: nfexp_snprintf prints expectation timeout if present +* expect: nfexp_snprintf displays mask and master tuple information +* expect: add nfexp_send() +* expect: support CTA_EXPECT_HELP_NAME +* src: clarify licensing terms of library (GPLv2+) +* conntrack: fix size of CTA_PROTOINFO_TCP_FLAGS_ORIGINAL in ARM +* conntrack: fix set operation for master IPv6 src and dst +* expect: add nfexp_cmp + +------------------------------------------------------------------- +Thu Dec 29 21:17:48 UTC 2011 - jengelh@medozas.de + +- SPDX format for License: tag +- Use separate include directory to catch compile errors + +------------------------------------------------------------------- +Thu Feb 24 19:22:03 UTC 2011 - jengelh@medozas.de + +- new upstream release 0.9.1 +* add support for CTA_SECCTX and CTA_EXPECT_ZONE +* allow to use nfct handler for conntrack and expectations at + the same time +* conntrack: add timestamp support + +------------------------------------------------------------------- +Wed Sep 8 22:47:11 UTC 2010 - jengelh@medozas.de + +- new upstream release 0.9.0 +* ct: fix regression with helpers for Linux kernel >= 2.6.34 +* ct: fix EINVAL if not TCP attributes are set for Linux + kernel <= 2.6.25 + +------------------------------------------------------------------- +Thu Jul 15 19:44:54 UTC 2010 - jengelh@medozas.de + +- new upstream release 0.0.102 + * support for conntrack zones + * support for TCP window scale factor + +------------------------------------------------------------------- +Tue Feb 23 22:12:24 UTC 2010 - jengelh@medozas.de + +- new upstream release: 0.0.101 +- add baselibs.conf +- use %_smp_mflags +- remove unnecessary PreReq: glibc +- secure the *.la delete call +- wrap description at col 70 + +------------------------------------------------------------------- +Sun Sep 20 16:54:49 UTC 2009 - bitshuffler #suse@irc.freenode.org + +- Updated to 0.0.100 + diff --git a/libnetfilter_conntrack.keyring b/libnetfilter_conntrack.keyring new file mode 100644 index 0000000..34ba618 --- /dev/null +++ b/libnetfilter_conntrack.keyring @@ -0,0 +1,64 @@ +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBF+HdQgBEACzteJUJGtj3N6u5mcGh4Nu/9GQfwrrphZuI7jto2N6+ZoURded +660mFLnax7wgIE8ugAa085jwFWbFY3FzGutUs/kDmnqy9WneYNBLIAF3ZTFfY+oi +V1C09bBlHKDj9gSEM2TZ/qU14exKdSloqcMKSdIqLQX27w/D6WmO1crDjOKKN9F2 +zjc3uLjo1gIPrY+Kdld29aI0W4gYvNLOo+ewhVC5Q6ymWOdR3eKaP2HIAt8CYf0t +Sx8ChHdBvXQITDmXoGPLTTiCHBoUzaJ/N8m4AZTuSUTr9g3jUNFmL48OrJjFPhHh +KDY0V59id5nPu4RX3fa/XW+4FNlrthA5V9dQSIPh7r7uHynDtkcCHT5m4mn0NqG3 +dsUqeYQlrWKCVDTfX/WQB3Rq1tgmOssFG9kZkXcVTmis3KFP1ZAahBRB33OJgSfi +WKc/mWLMEQcljbysbJzq74Vrjg44DNK7vhAXGoR35kjj5saduxTywdb3iZhGXEsg +9zqV0uOIfMQsQJQCZTlkqvZibdB3xlRyiCwqlf1eHB2Vo7efWbRIizX2da4c5xUj ++IL1eSPmTV+52x1dYXpn/cSVKJAROtcSmwvMRyjuGOcTNtir0XHCxC5YYBow6tKR +U1hrFiulCMH80HeS+u/g4SpT4lcv+x0DlN5BfWQuN5k5ZzwKb6EQs092qQARAQAB +tCxOZXRmaWx0ZXIgQ29yZSBUZWFtIDxjb3JldGVhbUBuZXRmaWx0ZXIub3JnPokC +VAQTAQoAPhYhBDfZZKzASYHHVQD7m9Vdl4qKFCDkBQJfh3UIAhsDBQkHhM4ABQsJ +CAcCBhUKCQgLAgQWAgMBAh4BAheAAAoJENVdl4qKFCDk0msQAJTIK8TLHw2IJDc6 ++ZfUJc+znSNwskO+A4lwvb1vRY5qFV+CA2S1eUS4HGDWDT0sPKie6Nx4+FBczkWd +RA+eaKDqQeS5Vzc2f0bl74un91h7yE8O2NsVnpL166MnAAk3/ACjHsZX2PzF12F6 +4stvGQFpjZRWItj0I6bvPY6CTtqVPB98a6RpdbS9kGxCCMrL3CFGDXGSjXes5KwN +IvngmVB36wjb3QgEtQIv13jrWFfiXeuieqMRyC6Z3KNYVcvis34eGxPFD9MHrK+w +bdw3KzMBJd7hMoVRl32Q13T/PX8H3pqWMqKaL41wHUswRt0IQjNZnRvRnlJ0VDFf +Wep/3dFK+uQbdABuiwCiRli5mWeOMCP+qJodP1OZSGqg0VwZWUGdCGG5+qIhngOj +QVomvJ7N4eRLU3xuPVjLoBeHzvViUPpYtWQ/YiZK5rWTJHhu88xZaysFJRaV+Uz3 +wPkeqdArRRXl1Tpy+cKy7D5BZAr7OjT1wboon23IM2DJRurbaHD8blMsjZ07pbvb +4hdpiE6mqq7CYskDz2UGTaFfEW4bFnKtvKTXEnmcqc4mWcr2z9BBYouGmcFczgET +tE02XejmExXV2RPUtXfLuNIbVpuXG1qhzNuXAfm+S/68XDSFrwyK8/Dgq5ga0iIP +n8Uvz12Xu/Qde+NicogLNWF90QJ2iQIzBBABCgAdFiEEwJ2yBj8dcDS6YVKtq0ZV +oSbSkuQFAl+HdTEACgkQq0ZVoSbSkuSrmhAAi64OqYjb2ZbAJbFAPM6pijyys6Y9 +o8ZyLoCRCUXNrjWkNIozTgmj5fm0ECrUXKyrB6OJhTvaRXmqLcBwWOAnP1v7wb+S +ZhEwP0n6E1mZW0t1Qt0xX8yifM5Tpvy+757OSrsuoRpXwwz4Ubuc6G4N/McoRSfU +tVUcz3sKF8hcbETD/hVZb9Qfv0ZjQxu8LiBfKfgy2Eg8yExTdO027hYqQc5q2HEp +HRjD2PMyI33V8KqffWn0AkofweOOFxg1ePV5X9M8rYP+k/2gjPkrrvnZgF/4SxDM +FATmHaIbO3zEQg+u2f1mVCZASBBN1MLth7dMOoClHBmxnQ8uapRg9GNxs7TnXmV/ +diZZbqLf6i9bW/scvWEIdM8EGKpbGjdWIlgQJTIuz3seB+9zOdq9L3uTQWHnYLid +R3YkyOsBRqQvM7Gb3zYgvlPjZ+L2FeGg5rD/eeLbv+k027E0TSAgtHoSA2pVTDDK +uqCXVKfmk1I0SO83L9teBblxed07LeVaS9/uK00rWM/TM1bwogfF/4ZEsmAWznzv +Xan/QmrYNgK3C3AZ4pMX7pGCGV1w93Fw3tUzaEJeS2LlsiL5aPOF63b/DqM6W2nl +UqGjKTdVLuF+JgoRH5U2wCyHYhDFm+CaFsYUu2Jf5hTmVWOR3anBoXy6Ty8SoV8q +KxtKpmKmIdPhDe65Ag0EX4d1CAEQANJMZApYzeeLrc7Rs6fGDK4Z3ejEST+aq7vO +RT9YEppRBG1QoUDBuNodAFxIWM6SpwvN7X9AZeIML2EOjDabF5Q6RNHbwODyLDYc +wmqtWh0NNpK85fXwDgcLOQW+dPimsk3ni1crXhhjZgs6syb9yM/pDi0Tf7wzNZt0 +0p736zlpQPMORfO+mFgac0FVt/GQsTdIwTBzZ36fcV3W8iPH334Sqsatp617R+z+ +q2alH8Vynz12iHi2oJFtmTxhghCROPcLWz3XMKv9A7BfuZeE0k+pK7xnBKrpZzKU +k1j2uzTKzV2Bquo5HNDsy9PgQn16BlXVrxdHfQnBz2w67aHMKnPD/v+K81oxtnuk +pwBAT8Wovkyy1VTLhQH5F0y5bpQrVH/Lwq0/q421hfD3iPHtb2tC1heT9ze/sqkY +plctFb81fx3o8xcBpvuIaTB3URptf8JNvh5KjETZFMQvAddq8oYovoKu+Z/585uC +qwO0Fohpw9qRwmhq7UBvGDVAVgo6kKjMW2Z9U3OnfggrDCytCIZh8eLNagfRL2cu +iq8Sx+cGGt1zoCPhjDN1MaNt/KHm8Gxr+lP+RxH3Et3pEX6mmhSCaU4wr0W5Bf3p +jEtiOwnqajisBQCHh49OGiV8Vg9uQN5GpLpPpbvnGS4vq8jdj6p3gsiS2F7JMy7O +ysBENBkXABEBAAGJAjwEGAEKACYWIQQ32WSswEmBx1UA+5vVXZeKihQg5AUCX4d1 +CAIbDAUJB4TOAAAKCRDVXZeKihQg5NMIEACBdwXwDMRB8rQeqNrhbh7pjbHHFmag +8bPvkmCq/gYGx9MQEKFUFtEGNSBh6m5pXr9hJ9HD2V16q9ERbuBcA6wosz4efQFB +bbage7ZSECCN+xMLirQGRVbTozu2eS8FXedH0X9f0JWLDGWwRg+pAqSOtuFjHhYM +jVpwbH/s71BhH84x5RgWezh2BWLbP3UuY7JtWNAvAaeo53Js2dzzgjDopPis4qZR +rLR9cTGjqa6ZTc/PlLfaCsm6rGBlNx/bFJjz75+yn7vMQa47fOBt4qfriHX7G/Tg +3s8xsQSLEm3IBEYh27hoc9ZD45EXgm9ZiGA21t9v1jA27yTVaUrPbC40iDv/CMcQ +7N2Y1sJRvmrd+2pKxtNNutujjwgBguo5bKK253R5Hy0a+NzK2LSc/GmR8EJJEwW1 +7r6road7Ss6YImCZExeY+CAW0FEzwQpmqfOdlusvIyk4x4r12JH8Q8NWHMzU3Ym/ +yqdopn/SCwCfXJsL4/eHLCaWuyiWjljNa7MwPDITx2ZPRE5QEqCqi4gaDWXyVHt8 +leGE1G3zoXNJogWhDswh105UnlZEEfOvbHbaxgWPjLV/xkuHhVlaqdyXbTExrgK6 +U2wevNS03dBuQ6bjNIbMIt9ulbiBV8MJWR0PZtnNJ958f1QXC4GT+L3FG1g5Jtz+ +rlbu70nh2kSJrg== +=wukb +-----END PGP PUBLIC KEY BLOCK----- diff --git a/libnetfilter_conntrack.spec b/libnetfilter_conntrack.spec new file mode 100644 index 0000000..02aa4c4 --- /dev/null +++ b/libnetfilter_conntrack.spec @@ -0,0 +1,90 @@ +# +# spec file for package libnetfilter_conntrack +# +# Copyright (c) 2022 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +Name: libnetfilter_conntrack +%define lname libnetfilter_conntrack3 +Version: 1.0.9 +Release: 0 +Summary: Userspace library for the in-kernel connection tracking state table +License: GPL-2.0-or-later +Group: Productivity/Networking/Security +URL: https://netfilter.org/projects/libnetfilter_conntrack/ + +#Git-Clone: https://git.netfilter.org/libnetfilter_conntrack/ +Source: https://netfilter.org/projects/libnetfilter_conntrack/files/%name-%version.tar.bz2 +Source2: https://netfilter.org/projects/libnetfilter_conntrack/files/%name-%version.tar.bz2.sig +Source3: baselibs.conf +Source4: %name.keyring +BuildRequires: pkgconfig >= 0.21 +BuildRequires: pkgconfig(libmnl) >= 1.0.3 +BuildRequires: pkgconfig(libnfnetlink) >= 1.0.0 + +%description +libnetfilter_conntrack is a userspace library providing a programming +interface (API) to the in-kernel connection tracking state table. The +library libnetfilter_conntrack has been previously known as +libnfnetlink_conntrack and libctnetlink. This library is currently +used by conntrack-tools among many other applications. + +%package -n %lname +Summary: Userspace library for the in-kernel connection tracking state table +Group: System/Libraries + +%description -n %lname +libnetfilter_conntrack is a userspace library providing a programming +interface (API) to the in-kernel connection tracking state table. The +library libnetfilter_conntrack has been previously known as +libnfnetlink_conntrack and libctnetlink. This library is currently +used by conntrack-tools among many other applications. + +%package devel +Summary: Userspace library for the in-kernel connection tracking state table +Group: Development/Libraries/C and C++ +Requires: %lname = %version + +%description devel +libnetfilter_conntrack is a userspace library providing a programming +interface (API) to the in-kernel connection tracking state table. The +library libnetfilter_conntrack has been previously known as +libnfnetlink_conntrack and libctnetlink. This library is currently +used by conntrack-tools among many other applications. + +%prep +%autosetup -p1 + +%build +# includedir intentional, cf. bugzilla.opensuse.org/795968 +%configure --disable-static --includedir="%_includedir/%name" +make %{?_smp_mflags} + +%install +%make_install +rm -f "%buildroot/%_libdir"/*.la + +%post -n %lname -p /sbin/ldconfig +%postun -n %lname -p /sbin/ldconfig + +%files -n %lname +%_libdir/libnetfilter_conntrack.so.3* + +%files devel +%_includedir/%name/ +%_libdir/libnetfilter_conntrack.so +%_libdir/pkgconfig/libnetfilter_conntrack.pc + +%changelog