From ae37d50fb68bae730df5aba472cbd1e322ed65e027b944bb86654c5baec2c611 Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Tue, 16 Dec 2014 01:29:20 +0000
Subject: [PATCH] nftables-0.4

OBS-URL: https://build.opensuse.org/package/show/security:netfilter/nftables?expand=0&rev=12
---
 nftables-0.4.tar.bz2      |   3 +++
 nftables-0.4.tar.bz2.sig  | Bin 0 -> 543 bytes
 nftables-plus-0.3.tar.asc |   7 -------
 nftables-plus-0.3.tar.xz  |   3 ---
 nftables.changes          |  14 ++++++++++++++
 nftables.spec             |  35 ++++++++++++++---------------------
 6 files changed, 31 insertions(+), 31 deletions(-)
 create mode 100644 nftables-0.4.tar.bz2
 create mode 100644 nftables-0.4.tar.bz2.sig
 delete mode 100644 nftables-plus-0.3.tar.asc
 delete mode 100644 nftables-plus-0.3.tar.xz

diff --git a/nftables-0.4.tar.bz2 b/nftables-0.4.tar.bz2
new file mode 100644
index 0000000..6e07155
--- /dev/null
+++ b/nftables-0.4.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:f6ca69b75c68915f9f3a3972274ec68354dfbbcfc0b9fc55c813a0525c351d3c
+size 362120
diff --git a/nftables-0.4.tar.bz2.sig b/nftables-0.4.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..916d14bad0dd0f04b7569592c46318191d12c6eba6a88eb0302af98bce349e9f
GIT binary patch
literal 543
zcmV+)0^t3L0vrSY0RjL91p-u$X2bvr2@s?aABnqPSj>y25CDt+PkFmc&07?u4kuXM
z1dmCb^8PflaP@4|SO;A#792@N)MUa-tj@9g-k>g(=f~6A{n?9AOjBf~$qAxKcNCCA
z{zNf#HVImonFD@nG^Wk$J}c&5V6rAxr^OQ4?6WcI*TzsB!Uu;|!j-*Tg6OOfTB8Iq
zP|4ydh2=jlIs`jGilVZKi|F7=w%0I5@jk-d$Duc&u}Q&F^WmA-+?eAPXN?Wr*0y_(
zcBF~sFN#Q3(S*aV25`d%>Qh&JkCkKqvE7PJJ!qZGi6zEM&C`{ze?&vM%}UFVf#mdf
z%?_N?!NgxGMf!*rD!vV6OS<w*RNG8Wg^fWnDOF4Rv%%_!FmrLVR!XmSH<B45Rs$pZ
z{vY-!+%FT)oyRR7TFfeV|Lbep73+J}+en(60CIVHE7MHCSm=C@AVakIeOrZ7FBL?5
z+aq*j{gw<sT#jyV6&+64Hz4Hfx?8*~Lj-2$#_vX;pQ=3aMx&{3v);x)F_w;#x!UHw
zuHl`5{{z-p{@jUte+Bz%{{G<EEMkh;T&8bbr{Du@_k911;t}a;c$JE5ndQ?upVAf_
z?x6H=i8%hUn|ZpNHLnB-@x_^l2^4YInklky@8cl{kI?v%?D6wp1RDx`DduvC?2w1V
hf#?US;|UO+L?v`EJrm6H?Hs0cV8DI^d7miAQ?x#&5Z(X)

literal 0
HcmV?d00001

diff --git a/nftables-plus-0.3.tar.asc b/nftables-plus-0.3.tar.asc
deleted file mode 100644
index 8bb926b..0000000
--- a/nftables-plus-0.3.tar.asc
+++ /dev/null
@@ -1,7 +0,0 @@
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.22 (GNU/Linux)
-
-iF4EABEIAAYFAlOtoKQACgkQkb3j62iiDkX1SAD+P5ny/hD8b48sZDJBq4uRAs30
-MtZjKr6ZYaxmq0o+kmQA/i6QSivjkdbJsqdWJEntuBkXreuPzuo9lJSUvX6vXRPu
-=eOcH
------END PGP SIGNATURE-----
diff --git a/nftables-plus-0.3.tar.xz b/nftables-plus-0.3.tar.xz
deleted file mode 100644
index ec1737e..0000000
--- a/nftables-plus-0.3.tar.xz
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:e85a63884d6767646559f3c265fc1f7f60edd48dd1c95b4b472a3538d3feb649
-size 222104
diff --git a/nftables.changes b/nftables.changes
index 3308334..b1747ab 100644
--- a/nftables.changes
+++ b/nftables.changes
@@ -1,3 +1,17 @@
+-------------------------------------------------------------------
+Tue Dec 16 01:25:00 UTC 2014 - jengelh@inai.de
+
+- Update to new upstream release 0.4
+* Since Linux 3.18: support for global ruleset operations
+* Since 3.17: full logging support for all the families,
+  including nfnetlink_log
+* 3.16: automatic selection of the optimal set implementation
+* 3.14: reject support for ip, ip6 and inet
+* 3.18: reject support for bridge, and reject icmpx abstraction
+* 3.18: masquerade support
+* 3.19: redirect support
+* Extend meta to support pkttype, cpu and devgroup matching.
+
 -------------------------------------------------------------------
 Fri Jun 27 17:08:46 UTC 2014 - jengelh@inai.de
 
diff --git a/nftables.spec b/nftables.spec
index c868b78..9ffb5eb 100644
--- a/nftables.spec
+++ b/nftables.spec
@@ -17,17 +17,15 @@
 
 
 Name:           nftables
-Version:        0.3
+Version:        0.4
 Release:        0
 Summary:        Userspace utility to access the nf_tables packet filter
 License:        GPL-2.0
 Group:          Productivity/Networking/Security
 
 #Git-Clone:	git://git.netfilter.org/nftables
-#Git-Clone:	git://git.inai.de/nftables plus
-#Git-Snapshot:	nftables-plus-0.3
-Source:         http://xtables.de/files/nftables-plus-%version.tar.xz
-Source2:        http://xtables.de/files/nftables-plus-%version.tar.asc
+Source:         http://ftp.netfilter.org/pub/nftables/nftables-%version.tar.bz2
+Source2:        http://ftp.netfilter.org/pub/nftables/nftables-%version.tar.bz2.sig
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  bison
 BuildRequires:  dblatex
@@ -37,8 +35,10 @@ BuildRequires:  gmp-devel
 BuildRequires:  pkgconfig >= 0.21
 BuildRequires:  readline-devel
 BuildRequires:  xsltproc
-BuildRequires:  pkgconfig(libmnl)
-BuildRequires:  pkgconfig(libnftnl) >= 1.0
+BuildRequires:  pkgconfig(libmnl) >= 1.0.3
+BuildRequires:  pkgconfig(libnftnl) >= 1.0.2
+Obsoletes:      nftables-plus < %version-%release
+Provides:       nftables-plus = %version-%release
 
 %description
 nf_tables is the new firewalling infrastructure in the Linux kernel,
@@ -46,38 +46,31 @@ intended to replace ip_tables, ip6_tables, arp_tables and ebtables in
 the long term. nftables is the corresponsing userspace frontend,
 replacing their respective userspace utilities.
                                                                                 
-%package plus
-Summary:        Userspace utility to access the nf_tables packet filter
-Group:          Productivity/Networking/Security
-Provides:       nftables = %version-%release
-
-%description plus
-nf_tables is the new firewalling infrastructure in the Linux kernel,
-intended to replace ip_tables, ip6_tables, arp_tables and ebtables in
-the long term. nftables is the corresponsing userspace frontend,
-replacing their respective userspace utilities.
-                                                                                
 nftables features native support for sets and dictionaries of
 arbitrary types, support for many different protocols, meta data
 types, connection tracking, NAT, logging, atomic incremental and full
 ruleset updates.
 
 %prep
-%setup -qn %name-plus-%version
+%setup -q
 
 %build
 mkdir bin
 ln -s "%_bindir/docbook-to-man" bin/docbook2x-man
 export PATH="$PATH:$PWD/bin"
+mkdir obj
+pushd obj/
+%define _configure ../configure
 %configure --docdir="%_docdir/%name"
 make %{?_smp_mflags}
+popd
 
 %install
 b="%buildroot"
-make install DESTDIR="$b"
+%make_install -C obj
 cp -a COPYING "$b/%_docdir/%name/"
 
-%files plus
+%files
 %defattr(-,root,root)
 %config %_sysconfdir/nftables
 %_sbindir/nft