From 43b0e55414ef8dee14b8c237ed05f15cae957e744fbc9ebba94df6e87a36293c Mon Sep 17 00:00:00 2001
From: OBS User unknown <null@suse.de>
Date: Mon, 17 Dec 2007 10:44:13 +0000
Subject: [PATCH] OBS-URL:
 https://build.opensuse.org/package/show/openSUSE:Factory/nfs-utils?expand=0&rev=13

---
 fw-client         | 26 ++++++++++++++++++++++++++
 fw-server         | 26 ++++++++++++++++++++++++++
 nfs-utils.changes |  6 ++++++
 nfs-utils.spec    | 13 ++++++++++++-
 4 files changed, 70 insertions(+), 1 deletion(-)
 create mode 100644 fw-client
 create mode 100644 fw-server

diff --git a/fw-client b/fw-client
new file mode 100644
index 0000000..6b719c6
--- /dev/null
+++ b/fw-client
@@ -0,0 +1,26 @@
+## Description: Firewall Configuraion for nfs client.
+#
+# Only the variables TCP, UDP, RPC, IP and BROADCAST are allowed.
+# More may be supported in the future.
+#
+# For a more detailed description of the individual variables see
+# the comments for FW_SERVICES_*_EXT in /etc/sysconfig/SuSEfirewall2
+#
+
+## Name: template service
+## Description: opens ports for foo in order to allow bar
+
+# space separated list of allowed TCP ports
+TCP=""
+
+# space separated list of allowed UDP ports
+UDP=""
+
+# space separated list of allowed RPC services
+RPC="portmap status nlockmgr"
+
+# space separated list of allowed IP protocols
+IP=""
+
+# space separated list of allowed UDP broadcast ports
+BROADCAST=""
diff --git a/fw-server b/fw-server
new file mode 100644
index 0000000..6b3395e
--- /dev/null
+++ b/fw-server
@@ -0,0 +1,26 @@
+## Description: Firewall Configuraion for nfs kernel server.
+#
+# Only the variables TCP, UDP, RPC, IP and BROADCAST are allowed.
+# More may be supported in the future.
+#
+# For a more detailed description of the individual variables see
+# the comments for FW_SERVICES_*_EXT in /etc/sysconfig/SuSEfirewall2
+#
+
+## Name: template service
+## Description: opens ports for foo in order to allow bar
+
+# space separated list of allowed TCP ports
+TCP=""
+
+# space separated list of allowed UDP ports
+UDP=""
+
+# space separated list of allowed RPC services
+RPC="portmap status nlockmgr mountd nfs nfs_acl"
+
+# space separated list of allowed IP protocols
+IP=""
+
+# space separated list of allowed UDP broadcast ports
+BROADCAST=""
diff --git a/nfs-utils.changes b/nfs-utils.changes
index 6b57933..481857a 100644
--- a/nfs-utils.changes
+++ b/nfs-utils.changes
@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Dec 17 02:29:08 CET 2007 - nfbrown@suse.de
+
+- Add SuSEfirewall2 config files for nfs-client and nfs-kernel-server
+  (#247354)
+
 -------------------------------------------------------------------
 Mon Nov 12 12:58:01 CET 2007 - ro@suse.de
 
diff --git a/nfs-utils.spec b/nfs-utils.spec
index 5cd1d78..e3ce1b6 100644
--- a/nfs-utils.spec
+++ b/nfs-utils.spec
@@ -15,7 +15,7 @@ BuildRequires:  e2fsprogs-devel gcc-c++ krb5-devel libevent librpcsecgss nfsidma
 Url:            http://nfs.sourceforge.net
 Summary:        Support Utilities for Kernel nfsd
 Version:        1.1.0
-Release:        8
+Release:        9
 Group:          Productivity/Networking/NFS
 License:        GPL v2 or later
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
@@ -29,6 +29,8 @@ Source3:        nfsserver.init
 Source4:        sysconfig.nfs-nfs-utils
 Source5:        nfs-kernel-server.xml
 Source6:        README.NFSv4
+Source7:        fw-client
+Source8:        fw-server
 Patch0:         nfs-utils-largefiles.patch
 Patch1:         nfs-utils-1.0.7-bind-syntax.patch
 
@@ -146,6 +148,9 @@ install -m 644 %{SOURCE5} $RPM_BUILD_ROOT/usr/share/omc/srvinfo.d
 mkdir -p -m 755 $RPM_BUILD_ROOT/var/lib/nfs/sm
 mkdir -p -m 755 $RPM_BUILD_ROOT/var/lib/nfs/sm.bak
 touch $RPM_BUILD_ROOT/var/lib/nfs/state
+mkdir -p $RPM_BUILD_ROOT/etc/sysconfig/SuSEfirewall2.d/services
+install -m 0644 %{SOURCE7} ${RPM_BUILD_ROOT}/etc/sysconfig/SuSEfirewall2.d/services/nfs-client
+install -m 0644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/sysconfig/SuSEfirewall2.d/services/nfs-kernel-server
 
 %clean
 rm -rf $RPM_BUILD_ROOT
@@ -212,6 +217,7 @@ rm -rf $RPM_BUILD_ROOT
 %dir /var/lib/nfs/sm
 %dir /var/lib/nfs/sm.bak
 %ghost /var/lib/nfs/state
+%config %attr(0644,root,root) /etc/sysconfig/SuSEfirewall2.d/services/nfs-client
 
 %files -n nfs-kernel-server
 %defattr(-,root,root)
@@ -235,11 +241,16 @@ rm -rf $RPM_BUILD_ROOT
 %config(noreplace) /var/lib/nfs/xtab
 %config(noreplace) /var/lib/nfs/etab
 %config(noreplace) /var/lib/nfs/rmtab
+%config %attr(0644,root,root) /etc/sysconfig/SuSEfirewall2.d/services/nfs-kernel-server
 
 %files -n nfs-doc
 %defattr(-,root,root)
 %doc nfs/*.html nfs/*.ps linux-nfs/* README.NFSv4
+
 %changelog
+* Mon Dec 17 2007 - nfbrown@suse.de
+- Add SuSEfirewall2 config files for nfs-client and nfs-kernel-server
+  (#247354)
 * Mon Nov 12 2007 - ro@suse.de
 - use navigation icons from latex2html in nfs-utils-doc package
   (#116355)