From c5f67fa94a8dc8d0060172f8e96ef10c59dd9fd288b396d0ce3fb9da6698442d Mon Sep 17 00:00:00 2001
From: Jan Engelhardt <jengelh@inai.de>
Date: Wed, 2 May 2018 06:15:36 +0000
Subject: [PATCH] - Update to new upstream release 0.8.4

OBS-URL: https://build.opensuse.org/package/show/security:netfilter/nftables?expand=0&rev=31
---
 nftables-0.8.3.tar.bz2     |   3 ---
 nftables-0.8.3.tar.bz2.sig | Bin 543 -> 0 bytes
 nftables-0.8.4.tar.bz2     |   3 +++
 nftables-0.8.4.tar.bz2.sig | Bin 0 -> 590 bytes
 nftables.changes           |  18 ++++++++++++++++++
 nftables.spec              |  14 ++++++++++----
 6 files changed, 31 insertions(+), 7 deletions(-)
 delete mode 100644 nftables-0.8.3.tar.bz2
 delete mode 100644 nftables-0.8.3.tar.bz2.sig
 create mode 100644 nftables-0.8.4.tar.bz2
 create mode 100644 nftables-0.8.4.tar.bz2.sig

diff --git a/nftables-0.8.3.tar.bz2 b/nftables-0.8.3.tar.bz2
deleted file mode 100644
index 4f7aded..0000000
--- a/nftables-0.8.3.tar.bz2
+++ /dev/null
@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d16be1f5db88e95d29fc0b0e4df88acd079f3ee8e2b872ec7673f9a0d5d95e38
-size 683802
diff --git a/nftables-0.8.3.tar.bz2.sig b/nftables-0.8.3.tar.bz2.sig
deleted file mode 100644
index 4ad6a53b30cbbd62769b7b073ba1dcf5e4f47bee18f02072068f9521746fac89..0000000000000000000000000000000000000000000000000000000000000000
GIT binary patch
literal 0
HcmV?d00001

literal 543
zcmV+)0^t3L0vrSY0RjL91p-={er*5>2@tDBRiP%*lH_r45C3B?TFAuNzTwMOaMn4P
zc54bm;dc%>;E-CDCv_Hfy;B}**K@3GKg5WikB*Uq4K>Zx--~BXO#Md}bj258x>WK>
zH%TssS|~&?*PRHONSQ*I%XKudcTk;a9zH;q_j*nIy=2m0MlCzRj%_W9jlAvZ)nqJu
zbk<-CrRrEvG8cZTUG8?0<wNS9zRW884gx>sdNJO>Y~=*r#1+oX_h?h7Wvx9s{~7ym
zA4$rixHW$~yCnYQIaJRTBSjgSY7<q|L4@01+Yy0us`*-JS-e{L>j7LdgzfJLUr0WL
zL>wQSpVDUU?16C(lPf*Pw*46hLvJSchv_5jbbuibCbd<RnrXT`3{TDKTpTg2m{AID
z3Ohb(qDT;A!hur`FG<Ct|E|d!qeq?oHpFxn-~w=`2jOQ#)bkZ#uDd<(M(8+Zn1oXg
z-l14}Q;1!5PasYm6Z>ywv{64~8;}W`y`8beNMw!$<SbM3xcbAS#_YdR1l3PK(qtl$
zXSd_hZ`n*Ya}%&)u|-B0dav|BgzTu<s!07}3$N@{27EYtfcF&=Cgpt^limGh`01}L
z(E0Q`n#keuYuwO$aLp{vnUp%i#-1-J+_MPVBmHJ}PbTCeGeGMIGzwTAHPR<~U!iL1
hT9CdH3ZE~Nfo{ter0^wP?QwRtl>KL+9L(}+8L(A21KR)q

diff --git a/nftables-0.8.4.tar.bz2 b/nftables-0.8.4.tar.bz2
new file mode 100644
index 0000000..2593e00
--- /dev/null
+++ b/nftables-0.8.4.tar.bz2
@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ef372ee4592b07852f4cac233584ead7cbd08fa3041b2d3ff3d3590c8d76769f
+size 649791
diff --git a/nftables-0.8.4.tar.bz2.sig b/nftables-0.8.4.tar.bz2.sig
new file mode 100644
index 0000000000000000000000000000000000000000000000000000000000000000..1fb3ef8c57c3f7306edd1335d98823fe76b75ce9088fc5445de821f2a7c34383
GIT binary patch
literal 590
zcmV-U0<ryx0!st{0SEv!79j+{ow5c$9dI<dVN$KDMpdCE(vsu_0$S)Wx)&T{Z*paH
zWnpbVZe?_4X>4?5axQOjX8;Nb5UWO2p(fIj<af0Y0Gduo_XPq@?I?58)}KLX7`j~)
zbo>pmfFP5H+zCB?g@|xpe@P-2CL`3&TrveVuk&toVMd{rHW;6{4b(nnm>KL*>e_bW
z@Z7mU{}+EUzbuY0<g9!qkcGaJjQEF({-{j>+h;E471FwSOj+Tf=$N!5HDw=<ncP&-
zeXw&ncn&<8PV7fE@%;B}oK3=OL*&Cn?v@;2Xa53yON816=g4H~YAdMk5orqW;1EAR
zq(H$l-THe0V(J%z1vEq{xVYK9`aVaT_MS-74TYkVd>DGIyS6)*Q{p}Ts`Ol#8h4vF
z?h~I#1WSps+=w0pPTa~wcrK~~-t0@aNA6t_i!OuY_mA&Zo`>5d^`CWd&y~>+a^kK(
z@lg$ZIl{-9_Ss^YyNJUiQCrNe7&VF-hNTL0KqlWMu%2k>9FD^1Fxn#ewu|ni0Wd!~
zTeRmmUlD0-*0@#PCi3aM*@gAlWk!b==LRs{;7wLmYhAVR7GiYHc?xG>``;-};fF{3
zCeZUY@I)(b2M7sUTElcxyO9z96oX);MWKV=)Xq-}#7nPK-|E)%=dr}~Iuw_`Qoksx
zWHSl!JCoBA4`izp6@-9Q>#ywTqyDdum_Gd<*any!3de67P)`X{#-()GS^~fF3oS$E
cB%PM`2(sCZd9#_lP+U$G&+AS^1eocPW{062KL7v#

literal 0
HcmV?d00001

diff --git a/nftables.changes b/nftables.changes
index 7057fe6..6c79dd1 100644
--- a/nftables.changes
+++ b/nftables.changes
@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed May  2 06:08:00 UTC 2018 - jengelh@inai.de
+
+- Update to new upstream release 0.8.4
+  * Support to match ipv6 segment routing headers.
+  * New "meta ibrname" and "meta obrname" arguments to match the
+    name of the logical bridge a packet is passing through.
+    These new names replace the old (misnamed) "ibriport"/"obriport".
+  * `nft -a` will now show handle identifier for all objects,
+    including tables and chains.
+  * nft can now delete objects by their handle number.
+  * Support to update maps from the ruleset (packet path).
+  * the "--echo" option now prints handle id for tables and
+    object too.
+  * `nft -f -` will now read from standard input
+  * Support for flow tables, cf. man page or
+    https://lwn.net/Articles/738214/ .
+
 -------------------------------------------------------------------
 Sat Mar  3 22:59:01 UTC 2018 - jengelh@inai.de
 
diff --git a/nftables.spec b/nftables.spec
index 3c3284a..64e00d0 100644
--- a/nftables.spec
+++ b/nftables.spec
@@ -17,7 +17,7 @@
 
 
 Name:           nftables
-Version:        0.8.3
+Version:        0.8.4
 Release:        0
 Summary:        Userspace utility to access the nf_tables packet filter
 License:        GPL-2.0-only
@@ -41,7 +41,7 @@ BuildRequires:  pkgconfig(libnftnl) >= 1.0.9
 BuildRequires:  pkgconfig(xtables) >= 1.6.0
 
 %description
-nf_tables is a new firewalling mechanism in the Linux kernel, running
+nf_tables is a firewalling mechanism in the Linux kernel, running
 independently of, and thus parallel to, ip_tables, ip6_tables,
 arp_tables and ebtables. nftables is the corresponsing userspace
 frontend.
@@ -61,17 +61,23 @@ export PATH="$PATH:$PWD/bin"
 mkdir obj
 pushd obj/
 %define _configure ../configure
-%configure --disable-silent-rules --docdir="%_docdir/%name"
+%configure --disable-silent-rules --disable-static --docdir="%_docdir/%name"
 make %{?_smp_mflags}
 popd
 
 %install
 b="%buildroot"
 %make_install -C obj
-rm -f "%buildroot/%_libdir/pkgconfig"/*.pc
+rm -f "%buildroot/%_libdir"/*.la
+# No headers, so it is quite pointless to have.
+rm -f "%buildroot/%_libdir"/*.so "%buildroot/%_libdir/pkgconfig"/*.pc
+
+%post   -p /sbin/ldconfig
+%postun -p /sbin/ldconfig
 
 %files
 %defattr(-,root,root)
+%_libdir/libnftables.so.*
 %_sbindir/nft
 %_mandir/man8/nft*
 %doc COPYING