From 3098b5de100f14a8eda4f8896e14279e1107c829de0ee60899d349d4feb5e8de Mon Sep 17 00:00:00 2001 From: OBS User buildservice-autocommit Date: Tue, 31 May 2011 11:02:21 +0000 Subject: [PATCH 1/3] Updating link to change in openSUSE:Factory/iptables revision 32.0 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iptables?expand=0&rev=d4c9fd2f4c76061a567277b0e409a196 --- iptables.spec | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/iptables.spec b/iptables.spec index 3e6ac51..28a1ace 100644 --- a/iptables.spec +++ b/iptables.spec @@ -1,7 +1,7 @@ # -# spec file for package iptables (Version 1.4.10) +# spec file for package iptables # -# Copyright (c) 2010 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2011 SUSE LINUX Products GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -27,13 +27,13 @@ Summary: IP Packet Filter Administration #Git-Web: http://git.netfilter.org/ #Git-Clone: git://git.netfilter.org/iptables -Source: %name-%version.tar.xz +Source: %name-%version.tar.xz Patch1: iptables-batch.patch -Patch2: 874bd762-owner-restore-invert.diff -Patch3: 71e402b-fix-install-symlinks.diff -URL: http://netfilter.org/ -BuildRoot: %_tmppath/%name-%version-build -BuildRequires: pkg-config, sgmltool, xz +Patch2: 874bd762-owner-restore-invert.diff +Patch3: 71e402b-fix-install-symlinks.diff +Url: http://netfilter.org/ +BuildRoot: %{_tmppath}/%{name}-%{version}-build +BuildRequires: pkg-config sgmltool xz %description Iptables is used to set up, maintain, and inspect the tables of IP @@ -44,7 +44,7 @@ packet filter rules in the Linux kernel. This version requires kernel License: GPLv2+ Summary: Libraries, Headers and Development Man Pages for iptables Group: Development/Libraries/C and C++ -Autoreqprov: on +AutoReqProv: on Requires: %name = %version %description devel From 3ffef0f144752c9d208182a7acc6782010e2a34c3bfef7644812569305669f75 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Wed, 8 Jun 2011 11:07:59 +0000 Subject: [PATCH 2/3] 1.4.11+git16 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iptables?expand=0&rev=19 --- 71e402b-fix-install-symlinks.diff | 31 ------------------------------ 874bd762-owner-restore-invert.diff | 31 ------------------------------ iptables-1.4.11+.tar.xz | 3 +++ iptables-1.4.11.tar.xz | 3 --- iptables-batch.patch | 18 ++++++++--------- iptables.changes | 10 ++++++++++ iptables.spec | 19 +++++++++--------- 7 files changed, 31 insertions(+), 84 deletions(-) delete mode 100644 71e402b-fix-install-symlinks.diff delete mode 100644 874bd762-owner-restore-invert.diff create mode 100644 iptables-1.4.11+.tar.xz delete mode 100644 iptables-1.4.11.tar.xz diff --git a/71e402b-fix-install-symlinks.diff b/71e402b-fix-install-symlinks.diff deleted file mode 100644 index 9445df1..0000000 --- a/71e402b-fix-install-symlinks.diff +++ /dev/null @@ -1,31 +0,0 @@ -parent 7d91a2accc92d13bb32bf881831e9c9a8b4d7734 (v1.4.11-2-g7d91a2a) -commit 71e402bbb3db7b54571f0e44354fd37706ff90aa -Author: Jan Engelhardt -Date: Mon May 30 01:45:14 2011 +0200 - -build: fix installation of symlinks - -Commit v1.4.11~20 forgot to change the symlink target names to the new -executable name. - -Signed-off-by: Jan Engelhardt ---- - Makefile.am | 6 +++--- - 1 files changed, 3 insertions(+), 3 deletions(-) - -diff --git a/Makefile.am b/Makefile.am -index 13e144e..741729b 100644 ---- a/Makefile.am -+++ b/Makefile.am -@@ -96,6 +96,6 @@ config.status: extensions/GNUmakefile.in \ - install-exec-hook: - -if test -z "${DESTDIR}"; then /sbin/ldconfig; fi; - ${INSTALL} -dm0755 "${DESTDIR}${bindir}"; -- for i in ${v4_bin_links}; do ${LN_S} -f "${sbindir}/iptables-multi" "${DESTDIR}${bindir}/$$i"; done; -- for i in ${v4_sbin_links}; do ${LN_S} -f iptables-multi "${DESTDIR}${sbindir}/$$i"; done; -- for i in ${v6_sbin_links}; do ${LN_S} -f ip6tables-multi "${DESTDIR}${sbindir}/$$i"; done; -+ for i in ${v4_bin_links}; do ${LN_S} -f "${sbindir}/xtables-multi" "${DESTDIR}${bindir}/$$i"; done; -+ for i in ${v4_sbin_links}; do ${LN_S} -f xtables-multi "${DESTDIR}${sbindir}/$$i"; done; -+ for i in ${v6_sbin_links}; do ${LN_S} -f xtables-multi "${DESTDIR}${sbindir}/$$i"; done; --- -# Created with git-export-patch diff --git a/874bd762-owner-restore-invert.diff b/874bd762-owner-restore-invert.diff deleted file mode 100644 index 9681bdd..0000000 --- a/874bd762-owner-restore-invert.diff +++ /dev/null @@ -1,31 +0,0 @@ -parent 172e9b15271c276aa1485b4a2fb63928a65b13ae (v1.4.11) -commit 874b76221f74a00520a712ef89b5254a1ed896f8 -Author: Jan Engelhardt -Date: Sun May 29 16:43:25 2011 +0200 - -libxt_owner: restore inversion support - -Signed-off-by: Jan Engelhardt ---- - extensions/libxt_owner.c | 6 ++++-- - 1 files changed, 4 insertions(+), 2 deletions(-) - -diff --git a/extensions/libxt_owner.c b/extensions/libxt_owner.c -index b60f907..d2fdfa9 100644 ---- a/extensions/libxt_owner.c -+++ b/extensions/libxt_owner.c -@@ -125,8 +125,10 @@ static const struct xt_option_entry owner_mt6_opts_v0[] = { - #undef s - - static const struct xt_option_entry owner_mt_opts[] = { -- {.name = "uid-owner", .id = O_USER, .type = XTTYPE_STRING}, -- {.name = "gid-owner", .id = O_GROUP, .type = XTTYPE_STRING}, -+ {.name = "uid-owner", .id = O_USER, .type = XTTYPE_STRING, -+ .flags = XTOPT_INVERT}, -+ {.name = "gid-owner", .id = O_GROUP, .type = XTTYPE_STRING, -+ .flags = XTOPT_INVERT}, - {.name = "socket-exists", .id = O_SOCK_EXISTS, .type = XTTYPE_NONE}, - XTOPT_TABLEEND, - }; --- -# Created with git-export-patch diff --git a/iptables-1.4.11+.tar.xz b/iptables-1.4.11+.tar.xz new file mode 100644 index 0000000..eccf712 --- /dev/null +++ b/iptables-1.4.11+.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:ecbecd716eb4ed200fe9caf9c8fb7d8366b284169f02095f464b40b7c6422b3c +size 220968 diff --git a/iptables-1.4.11.tar.xz b/iptables-1.4.11.tar.xz deleted file mode 100644 index d0d9ff1..0000000 --- a/iptables-1.4.11.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:10b5e56839b8eb49003d0fa87ed3548783fb169c23d80b6df77d27fca5247c49 -size 409000 diff --git a/iptables-batch.patch b/iptables-batch.patch index 069ad17..f402a62 100644 --- a/iptables-batch.patch +++ b/iptables-batch.patch @@ -1,13 +1,13 @@ --- - Makefile.am | 10 + - iptables-batch.c | 468 +++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iptables/Makefile.am | 10 + iptables/iptables-batch.c | 468 ++++++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 477 insertions(+), 1 deletion(-) -Index: iptables-1.4.11/Makefile.am +Index: iptables/iptables/Makefile.am =================================================================== ---- iptables-1.4.11.orig/Makefile.am -+++ iptables-1.4.11/Makefile.am -@@ -59,7 +59,15 @@ endif +--- iptables.orig/iptables/Makefile.am ++++ iptables/iptables/Makefile.am +@@ -36,7 +36,15 @@ endif xtables_multi_SOURCES += xshared.c xtables_multi_LDADD += libxtables.la -lm @@ -22,12 +22,12 @@ Index: iptables-1.4.11/Makefile.am + +sbin_PROGRAMS = xtables-multi iptables-batch ip6tables-batch man_MANS = iptables.8 iptables-restore.8 iptables-save.8 \ - iptables-xml.8 ip6tables.8 ip6tables-restore.8 \ + iptables-xml.1 ip6tables.8 ip6tables-restore.8 \ ip6tables-save.8 -Index: iptables-1.4.11/iptables-batch.c +Index: iptables/iptables/iptables-batch.c =================================================================== --- /dev/null -+++ iptables-1.4.11/iptables-batch.c ++++ iptables/iptables/iptables-batch.c @@ -0,0 +1,468 @@ +/* + * Author: Ludwig Nussel diff --git a/iptables.changes b/iptables.changes index 50108eb..3ba1129 100644 --- a/iptables.changes +++ b/iptables.changes @@ -1,3 +1,13 @@ +------------------------------------------------------------------- +Wed Jun 8 10:20:57 UTC 2011 - jengelh@medozas.de + +- Update to snapshot 1.4.11+git16 +* libxt_owner: restore inversion support +* option: fix ignored negation before implicit extension loading +* build: fix installation of symlinks +* build: fix absence of xml translator in IPv6-only builds +- Drop merged patches + ------------------------------------------------------------------- Sun May 29 23:56:33 UTC 2011 - jengelh@medozas.de diff --git a/iptables.spec b/iptables.spec index 28a1ace..bd77da3 100644 --- a/iptables.spec +++ b/iptables.spec @@ -21,7 +21,7 @@ Name: iptables License: GPLv2+ Group: Productivity/Networking/Security -Version: 1.4.11 +Version: 1.4.11+ Release: 1 Summary: IP Packet Filter Administration @@ -29,11 +29,9 @@ Summary: IP Packet Filter Administration #Git-Clone: git://git.netfilter.org/iptables Source: %name-%version.tar.xz Patch1: iptables-batch.patch -Patch2: 874bd762-owner-restore-invert.diff -Patch3: 71e402b-fix-install-symlinks.diff -Url: http://netfilter.org/ -BuildRoot: %{_tmppath}/%{name}-%{version}-build -BuildRequires: pkg-config sgmltool xz +URL: http://netfilter.org/ +BuildRoot: %_tmppath/%name-%version-build +BuildRequires: pkg-config, sgmltool, xz %description Iptables is used to set up, maintain, and inspect the tables of IP @@ -53,8 +51,8 @@ These libraries are needed to compile - programs using libipq %prep -%setup -q -%patch -P 1 -P 2 -P 3 -p1 +%setup -qn %name +%patch -P 1 -p1 %build if [ ! -e configure ]; then @@ -69,8 +67,8 @@ make %{?_smp_mflags} %install make DESTDIR=%buildroot install # iptables-apply is not installed by upstream Makefile -install -m0755 iptables-apply %buildroot%_sbindir/ -install -m0644 iptables-apply.8 %buildroot%_mandir/man8/ +install -m0755 iptables/iptables-apply %buildroot%_sbindir/ +install -m0644 iptables/iptables-apply.8 %buildroot%_mandir/man8/ find "%buildroot" -iname "*.la" -delete %post -p /sbin/ldconfig @@ -80,6 +78,7 @@ find "%buildroot" -iname "*.la" -delete %files %defattr(-,root,root) %doc COPYING INCOMPATIBILITIES +%doc %_mandir/man1/* %doc %_mandir/man8/* %_bindir/iptables* %_sbindir/iptables* From b4706f12c9d9226f5d57526ec931f6b9ed79653835ac25320bb37e871914f9f7 Mon Sep 17 00:00:00 2001 From: Jan Engelhardt Date: Fri, 22 Jul 2011 13:17:36 +0000 Subject: [PATCH 3/3] 1.4.12 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/iptables?expand=0&rev=20 --- iptables-1.4.11+.tar.xz | 3 --- iptables-1.4.12.tar.xz | 3 +++ iptables.changes | 14 ++++++++++++++ iptables.spec | 8 ++++---- 4 files changed, 21 insertions(+), 7 deletions(-) delete mode 100644 iptables-1.4.11+.tar.xz create mode 100644 iptables-1.4.12.tar.xz diff --git a/iptables-1.4.11+.tar.xz b/iptables-1.4.11+.tar.xz deleted file mode 100644 index eccf712..0000000 --- a/iptables-1.4.11+.tar.xz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ecbecd716eb4ed200fe9caf9c8fb7d8366b284169f02095f464b40b7c6422b3c -size 220968 diff --git a/iptables-1.4.12.tar.xz b/iptables-1.4.12.tar.xz new file mode 100644 index 0000000..781dea0 --- /dev/null +++ b/iptables-1.4.12.tar.xz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:b9a98a026e2f9d6795fcb209e61b938adecac05d002dd094b3ed7bf930a2047d +size 411544 diff --git a/iptables.changes b/iptables.changes index 3ba1129..5b8b300 100644 --- a/iptables.changes +++ b/iptables.changes @@ -1,3 +1,17 @@ +------------------------------------------------------------------- +Fri Jul 22 13:12:50 UTC 2011 - jengelh@medozas.de + +- Update to new upstream release 1.4.12 +* Include lost match/target descriptions in manpage again +* libxt_LOG: fix ignorance of all but the last flag +* libxt_HL: restore hl-* option names +* libxt_hashlimit: use a more obvious expiry value by default +* libxt_RATEEST: fix find-and-delete of rules with -j RATEEST +* ipv4: restore negation for the -f option +* Reject empty host specifications (e.g. -s "") +* libxt_conntrack: restore network byteordering for ABI v1 & v2 +* Documentation updates + ------------------------------------------------------------------- Wed Jun 8 10:20:57 UTC 2011 - jengelh@medozas.de diff --git a/iptables.spec b/iptables.spec index bd77da3..247aae8 100644 --- a/iptables.spec +++ b/iptables.spec @@ -21,10 +21,11 @@ Name: iptables License: GPLv2+ Group: Productivity/Networking/Security -Version: 1.4.11+ +Version: 1.4.12 Release: 1 Summary: IP Packet Filter Administration +#DL-URL: ftp://ftp.netfilter.org/pub/iptables/ #Git-Web: http://git.netfilter.org/ #Git-Clone: git://git.netfilter.org/iptables Source: %name-%version.tar.xz @@ -51,7 +52,7 @@ These libraries are needed to compile - programs using libipq %prep -%setup -qn %name +%setup -q %patch -P 1 -p1 %build @@ -84,8 +85,7 @@ find "%buildroot" -iname "*.la" -delete %_sbindir/iptables* %_sbindir/ip6tables* %_sbindir/xtables* -%dir %_libexecdir/xtables -%_libexecdir/xtables/* +%_libdir/xtables %_libdir/*.so.* %files devel