firewalld/_servicedata

<servicedata>
<service name="tar_scm">
                <param name="url">https://github.com/firewalld/firewalld</param>
              <param name="changesrevision">7c900054e5293c4c569e3da5def7700045290753</param></service></servicedata>
Accepting request 729405 from home:mrostecki:branches:security:netfilter - Update to version 0.7.1: * Rich Rule Priorities * Service Definition Includes - Service definitions can now include lines like: <include service="https"/> which will include all the ports, etc from the https service. * RFC3964 IPv4 filtering - A new option RFC3964_IPv4 in firewalld.conf is available. It does filtering based on RFC3964 in regards to IPv4 addresses. This functionality was traditionally in network-scripts. * FlushAllOnReload - A new option FlushAllOnReload in firewalld.conf is available. Older release retained some settings (direct rules, interface to zone assignments) during a --reload. With the introduction of this configuration option that is no longer the case. Old behavior can be restored by setting FlushAllOnReload=no. * 15 new service definitions * fix: firewall-offline-cmd: service: use dict based APIs * fix: client: service: use dict based dbus APIs * test: dbus: coverage for new service APIs * fix: dbus: new dict based APIs for services * test: dbus: service API coverage * test: functions: add macro DBUS_INTROSPECT * test: functions: add CHOMP macro for shell output * fix: tests/functions: use gdbus instead of dbus-send * fix: dbus: add missing APIs for service includes - Remove patch for using iptables instead of nftables - we should finally switch to nftables and fix its issues properly if they occur again: * 0001-firewall-backend-Switch-default-backend-to-iptables.patch - Remove patch which was released upstream: * 0002-Add-FlushAllOnReload-config-option.patch OBS-URL: https://build.opensuse.org/request/show/729405 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=95 2019-09-09 10:44:18 +00:00			`<servicedata>`
			`<service name="tar_scm">`
			`<param name="url">https://github.com/firewalld/firewalld</param>`
Accepting request 826046 from home:mrostecki:branches:security:netfilter - Update to version 0.7.5: * release: v0.7.5 * chore(translation): merge from master * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077 * test(rhbz1483921): better test name * fix(cli): add --zone is an invalid option with --direct * fix: core: rich: Catch ValueError on non-numeric priority values * fix: update dynamic DCE RPC ports in freeipa-trust service * docs: replace occurrences of the term blacklist with denylist * docs(README): add libxslt for doc generation * test(rich): source mac with nftables backend * fix(firewall-offline-cmd): remove instances of "[P]" in help text * test(check-container): add support for centos8 stream * test(functions): use IndividualCalls if host doesn't support nft rule index * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX * test(dbus): better way to check IPv6_rpfilter expected value * fix(ipset): flush the set if IndividiualCalls=yes * test(ipv6): skip square bracket address tests if ipv6 not available * test(gh509): only run test for nftables backend * fix(dbus): service: don't cleanup config for old set APIs * fix(config): bool values in dict based import/export * fix(doc): dbus: signatures for zone tuple based APIs * test(dbus): zone: fix zone runtime functional test title * test(dbus): zone: fix false failure due to list order * fix(client): addService needs to reduce tuple size * test(direct): rule in a zone chain * fix(direct): rule in a zone chain * test(dbus): zone: verify runtime config APIs * test(dbus): zone: verify permanent config APIs * fix(systemd): Conflict with nftables.service OBS-URL: https://build.opensuse.org/request/show/826046 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=102 2020-08-12 14:05:48 +00:00			`<param name="changesrevision">7c900054e5293c4c569e3da5def7700045290753</param></service></servicedata>`