2016-02-02 11:43:37 +01:00
|
|
|
#
|
|
|
|
|
# spec file for package firewalld
|
|
|
|
|
#
|
Accepting request 458640 from home:markoschandras:network
- Update to version 0.4.4.3
* New service freeipa-trust (rh#1411650)
* Complete icmp types for IPv4 and IPv6
* New h323 helper container
* Support helper container: h323
* firewall.server.decorators: ALREADY_ errors should be logged as warnings
* firewall.command: ALREADY_SET should also result in zero exit code
* tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
* Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
* New checks for ipset entry validation
* Use ipset dimension for match
* firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
* New firewall.core.icmp providing names and types for icmp and icmpv6 values
* firewall.core.fw_ipset: New methods to get ipset dimension and applied state
* firewall.errors: New error NOT_APPLIED
* firewall-cmd man page: Add missing --get-ipset-types
* firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
* firewall.core.prog: Fix addition of the error output in runProg
* Speed up ipset handling, (re)loading and import from file
* Support --family option for --new-ipset
* Handle FirewallError for query sequences in command line tools
* Fail to alter entries of ipsets with timeout
* Extended tests for ipset options
* Return empty list for ipsets using timeouts
* firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
* firewalld.conf man page: New section about AutomaticHelpers
* firewall-offline-cmd man page: Added -v and -q options, fixed section ids
* firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
* firewall.core.fw_zone: Limit masquerading forward rule to new connections
* firewall-config: Update active zones on reloaded signal
OBS-URL: https://build.opensuse.org/request/show/458640
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=38
2017-02-17 10:46:55 +01:00
|
|
|
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
|
2016-02-02 11:43:37 +01:00
|
|
|
#
|
|
|
|
|
# All modifications and additions to the file contributed by third parties
|
|
|
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
|
|
|
# upon. The license for this file, and modifications and additions to the
|
|
|
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
|
|
|
# license for the pristine package is not an Open Source License, in which
|
|
|
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
|
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
|
|
|
# published by the Open Source Initiative.
|
|
|
|
|
|
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
|
|
|
#
|
|
|
|
|
|
|
|
|
|
|
2017-11-28 13:33:13 +01:00
|
|
|
#Compat macro for new _fillupdir macro introduced in Nov 2017
|
|
|
|
|
%if ! %{defined _fillupdir}
|
|
|
|
|
%define _fillupdir /var/adm/fillup-templates
|
|
|
|
|
%endif
|
|
|
|
|
|
2016-02-02 11:43:37 +01:00
|
|
|
Name: firewalld
|
2017-11-16 09:13:55 +01:00
|
|
|
Version: 0.4.4.6
|
2016-02-02 11:43:37 +01:00
|
|
|
Release: 0
|
|
|
|
|
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
|
|
|
|
|
License: GPL-2.0+
|
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
Url: http://www.firewalld.org
|
2017-11-16 09:13:55 +01:00
|
|
|
Source: https://github.com/%{name}/%{name}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
2017-11-17 09:02:04 +01:00
|
|
|
# PATCH-FIX-UPSTREAM: 0001-suse-ifcfg-files.patch. Combined patch to support ifcfg files on SUSE based on
|
|
|
|
|
# https://github.com/firewalld/firewalld/pull/262
|
|
|
|
|
Patch: 0001-suse-ifcfg-files.patch
|
2017-03-28 16:14:15 +02:00
|
|
|
BuildRequires: autoconf
|
|
|
|
|
BuildRequires: automake
|
2016-02-02 11:43:37 +01:00
|
|
|
BuildRequires: desktop-file-utils
|
|
|
|
|
BuildRequires: docbook-xsl-stylesheets
|
2017-11-08 21:06:03 +01:00
|
|
|
# Adding tools to BuildRequires as well so they can be autodetected
|
|
|
|
|
# even though it is probably unlikely for paths to change in the future
|
|
|
|
|
BuildRequires: ebtables
|
2016-02-02 11:43:37 +01:00
|
|
|
BuildRequires: gettext
|
|
|
|
|
BuildRequires: glib2-devel
|
|
|
|
|
BuildRequires: gobject-introspection
|
|
|
|
|
BuildRequires: hicolor-icon-theme
|
|
|
|
|
BuildRequires: intltool
|
2017-11-16 09:13:55 +01:00
|
|
|
BuildRequires: ipset
|
|
|
|
|
BuildRequires: iptables
|
2016-04-22 11:08:02 +02:00
|
|
|
BuildRequires: libxslt-tools
|
2017-11-08 21:06:03 +01:00
|
|
|
BuildRequires: python3-devel
|
Accepting request 404198 from home:markoschandras:network
- Update to version 0.4.3
* New firewallctl utility (RHBZ#1147959)
* doc.xml.seealso: Show firewalld.dbus in See Also sections
* firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (RHBZ#1339251)
* {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
* firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
* firewall-cmd: Dropped duplicate setType call in --new-ipset
* radius service: Support also tcp ports (RBZ#1219717)
* xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
* config.xmlschema.service.xsd: Fix service destination conflicts (RHBZ#1296573)
* firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
* firewall.command: Only print summary and description in print_X_info with verbose
* firewall.command: print_msg should be able to print empty lines
* firewall-config: No processing of runtime passthroughs signals in permanent
* Landspace.io fixes and pylint calm downs
* firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
* firewall-config: Fixed titles of command and context dialogs, also entry lenths
* firewall-config: pylint calm downs
* firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
* firewall-config: Use self.active_zoens in conf_zone_added_cb
* firewall.command: New parse_port, extended parse methods with more checks
* firewall.command: Fixed parse_port to use the separator in the split call
* firewall.command: New [de]activate_exception_handler, raise error in parse_X
* services ha: Allow corosync-qnetd port
* firewall-applet: Support for kde5-nm-connection-editor
* tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
* firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
* tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
* firewall-cmd: Fixed set, remove and query destination options for services
* firewall.core.io.service: Source ports have not been checked in _check_config
OBS-URL: https://build.opensuse.org/request/show/404198
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=21
2016-06-24 16:39:08 +02:00
|
|
|
BuildRequires: systemd-rpm-macros
|
2016-02-02 11:43:37 +01:00
|
|
|
Requires: dbus-1-python
|
|
|
|
|
Requires: ebtables
|
|
|
|
|
Requires: ipset
|
|
|
|
|
Requires: iptables
|
2017-11-08 21:06:03 +01:00
|
|
|
Requires: python3-decorator
|
|
|
|
|
Requires: python3-gobject
|
|
|
|
|
Requires: python3-slip-dbus
|
2016-02-02 11:43:37 +01:00
|
|
|
Requires: sysconfig
|
|
|
|
|
Requires(post): %fillup_prereq
|
2016-03-10 11:45:55 +01:00
|
|
|
Recommends: %{name}-lang
|
2016-05-03 14:52:41 +02:00
|
|
|
Suggests: susefirewall2-to-firewalld
|
2016-02-02 11:43:37 +01:00
|
|
|
BuildArch: noarch
|
2017-11-08 21:06:03 +01:00
|
|
|
%{?systemd_requires}
|
2016-02-02 11:43:37 +01:00
|
|
|
|
|
|
|
|
%description
|
|
|
|
|
firewalld is a firewall service daemon that provides a dynamic customizable
|
|
|
|
|
firewall with a D-Bus interface.
|
|
|
|
|
|
|
|
|
|
%package -n firewall-applet
|
|
|
|
|
Summary: Firewall panel applet
|
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
Requires: %{name} = %{version}-%{release}
|
|
|
|
|
Requires: firewall-config = %{version}-%{release}
|
|
|
|
|
Requires: hicolor-icon-theme
|
2017-11-08 21:06:03 +01:00
|
|
|
Requires: python3-gobject
|
|
|
|
|
Requires: python3-qt5
|
2016-02-02 11:43:37 +01:00
|
|
|
|
|
|
|
|
%description -n firewall-applet
|
|
|
|
|
The firewall panel applet provides a status information of firewalld and also
|
|
|
|
|
the firewall settings.
|
|
|
|
|
|
|
|
|
|
%package -n firewall-config
|
|
|
|
|
Summary: Firewall configuration application
|
|
|
|
|
Group: Productivity/Networking/Security
|
|
|
|
|
Requires: %{name} = %{version}-%{release}
|
|
|
|
|
Requires: hicolor-icon-theme
|
2017-11-08 21:06:03 +01:00
|
|
|
Requires: python3-gobject
|
2016-02-02 11:43:37 +01:00
|
|
|
|
|
|
|
|
%description -n firewall-config
|
|
|
|
|
The firewall configuration application provides an configuration interface for
|
|
|
|
|
firewalld.
|
|
|
|
|
|
2016-03-08 14:58:56 +01:00
|
|
|
%lang_package
|
|
|
|
|
|
2016-02-02 11:43:37 +01:00
|
|
|
%prep
|
|
|
|
|
%setup -q
|
2017-11-17 09:02:04 +01:00
|
|
|
%patch -p1
|
2016-02-02 11:43:37 +01:00
|
|
|
|
|
|
|
|
%build
|
2017-11-08 21:06:03 +01:00
|
|
|
export PYTHON="python3"
|
2017-11-20 10:31:12 +01:00
|
|
|
sed -i "s|/usr/bin/python -Es|/usr/bin/python3 -Es|g" fix_python_shebang.sh
|
|
|
|
|
sed -i "s|python|python3|g" config/lockdown-whitelist.xml
|
2017-11-08 21:06:03 +01:00
|
|
|
./autogen.sh
|
|
|
|
|
%configure \
|
|
|
|
|
--enable-sysconfig \
|
2017-11-17 09:02:04 +01:00
|
|
|
--enable-rpmmacros \
|
|
|
|
|
--with-ifcfgdir="/etc/sysconfig/network"
|
2016-02-02 11:43:37 +01:00
|
|
|
|
Accepting request 404198 from home:markoschandras:network
- Update to version 0.4.3
* New firewallctl utility (RHBZ#1147959)
* doc.xml.seealso: Show firewalld.dbus in See Also sections
* firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (RHBZ#1339251)
* {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
* firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
* firewall-cmd: Dropped duplicate setType call in --new-ipset
* radius service: Support also tcp ports (RBZ#1219717)
* xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
* config.xmlschema.service.xsd: Fix service destination conflicts (RHBZ#1296573)
* firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
* firewall.command: Only print summary and description in print_X_info with verbose
* firewall.command: print_msg should be able to print empty lines
* firewall-config: No processing of runtime passthroughs signals in permanent
* Landspace.io fixes and pylint calm downs
* firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
* firewall-config: Fixed titles of command and context dialogs, also entry lenths
* firewall-config: pylint calm downs
* firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
* firewall-config: Use self.active_zoens in conf_zone_added_cb
* firewall.command: New parse_port, extended parse methods with more checks
* firewall.command: Fixed parse_port to use the separator in the split call
* firewall.command: New [de]activate_exception_handler, raise error in parse_X
* services ha: Allow corosync-qnetd port
* firewall-applet: Support for kde5-nm-connection-editor
* tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
* firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
* tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
* firewall-cmd: Fixed set, remove and query destination options for services
* firewall.core.io.service: Source ports have not been checked in _check_config
OBS-URL: https://build.opensuse.org/request/show/404198
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=21
2016-06-24 16:39:08 +02:00
|
|
|
# Normally documentation is shipped but this will ensure that missing
|
|
|
|
|
# files will be generated.
|
|
|
|
|
make %{?_smp_mflags}
|
|
|
|
|
|
2016-02-02 11:43:37 +01:00
|
|
|
%install
|
2017-11-08 21:06:03 +01:00
|
|
|
%make_install
|
2016-02-02 11:43:37 +01:00
|
|
|
|
2017-11-08 21:06:03 +01:00
|
|
|
%py3_compile %{buildroot}
|
2016-02-02 11:43:37 +01:00
|
|
|
|
|
|
|
|
desktop-file-install --delete-original \
|
|
|
|
|
--dir %{buildroot}%{_sysconfdir}/xdg/autostart \
|
|
|
|
|
%{buildroot}%{_sysconfdir}/xdg/autostart/firewall-applet.desktop
|
|
|
|
|
|
|
|
|
|
desktop-file-install --delete-original \
|
|
|
|
|
--dir %{buildroot}%{_datadir}/applications \
|
|
|
|
|
%{buildroot}%{_datadir}/applications/firewall-config.desktop
|
|
|
|
|
|
|
|
|
|
# fillup_only will take care of that
|
2017-11-28 13:33:13 +01:00
|
|
|
%{_bindir}/install -c -D -m 600 %{buildroot}%{_sysconfdir}/sysconfig/firewalld %{buildroot}%{_fillupdir}/sysconfig.%{name}
|
2016-02-02 11:43:37 +01:00
|
|
|
rm %{buildroot}%{_sysconfdir}/sysconfig/firewalld
|
|
|
|
|
|
|
|
|
|
ln -sf %{_sbindir}/service %{buildroot}/%{_sbindir}/rcfirewalld
|
|
|
|
|
|
|
|
|
|
# Put RPM macros into /etc/rpm/
|
|
|
|
|
rm %{buildroot}%{_rpmconfigdir}/macros.d/macros.firewalld
|
|
|
|
|
install -D -m644 config/macros.firewalld %{buildroot}%{_sysconfdir}/rpm/macros.firewalld
|
|
|
|
|
|
|
|
|
|
%find_lang %{name} --all-name
|
|
|
|
|
|
|
|
|
|
%pre
|
|
|
|
|
%service_add_pre firewalld.service
|
|
|
|
|
|
|
|
|
|
%post
|
|
|
|
|
%service_add_post firewalld.service
|
|
|
|
|
%fillup_only firewalld
|
|
|
|
|
|
|
|
|
|
%preun
|
|
|
|
|
%service_del_preun firewalld.service
|
|
|
|
|
|
|
|
|
|
%postun
|
|
|
|
|
# We might a have runtime configuration which we haven't
|
|
|
|
|
# made it permanent yet so restarting the service could be
|
|
|
|
|
# dangerous. It's safer to not touch the firewall ourselves but
|
|
|
|
|
# Let the user restart it whenever he feels like it.
|
2016-02-29 11:00:54 +01:00
|
|
|
export DISABLE_RESTART_ON_UPDATE=yes
|
2016-02-02 11:43:37 +01:00
|
|
|
%service_del_postun firewalld.service
|
|
|
|
|
|
|
|
|
|
%post -n firewall-applet
|
|
|
|
|
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
|
|
|
|
|
|
|
|
|
|
%postun -n firewall-applet
|
|
|
|
|
if [ $1 -eq 0 ] ; then
|
|
|
|
|
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null
|
|
|
|
|
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
|
|
|
|
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
%posttrans -n firewall-applet
|
|
|
|
|
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
|
|
|
|
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
|
|
|
|
|
|
|
|
|
%post -n firewall-config
|
|
|
|
|
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
|
|
|
|
|
|
|
|
|
|
%postun -n firewall-config
|
|
|
|
|
if [ $1 -eq 0 ] ; then
|
|
|
|
|
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null
|
|
|
|
|
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
|
|
|
|
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
|
|
|
|
fi
|
|
|
|
|
|
|
|
|
|
%posttrans -n firewall-config
|
|
|
|
|
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
|
|
|
|
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
|
|
|
|
|
2016-03-08 14:58:56 +01:00
|
|
|
%files
|
2016-02-02 11:43:37 +01:00
|
|
|
%doc COPYING README
|
|
|
|
|
%{_sbindir}/firewalld
|
|
|
|
|
%{_sbindir}/rcfirewalld
|
|
|
|
|
%{_bindir}/firewall-cmd
|
|
|
|
|
%{_bindir}/firewall-offline-cmd
|
Accepting request 404198 from home:markoschandras:network
- Update to version 0.4.3
* New firewallctl utility (RHBZ#1147959)
* doc.xml.seealso: Show firewalld.dbus in See Also sections
* firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (RHBZ#1339251)
* {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
* firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
* firewall-cmd: Dropped duplicate setType call in --new-ipset
* radius service: Support also tcp ports (RBZ#1219717)
* xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
* config.xmlschema.service.xsd: Fix service destination conflicts (RHBZ#1296573)
* firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
* firewall.command: Only print summary and description in print_X_info with verbose
* firewall.command: print_msg should be able to print empty lines
* firewall-config: No processing of runtime passthroughs signals in permanent
* Landspace.io fixes and pylint calm downs
* firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
* firewall-config: Fixed titles of command and context dialogs, also entry lenths
* firewall-config: pylint calm downs
* firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
* firewall-config: Use self.active_zoens in conf_zone_added_cb
* firewall.command: New parse_port, extended parse methods with more checks
* firewall.command: Fixed parse_port to use the separator in the split call
* firewall.command: New [de]activate_exception_handler, raise error in parse_X
* services ha: Allow corosync-qnetd port
* firewall-applet: Support for kde5-nm-connection-editor
* tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
* firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
* tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
* firewall-cmd: Fixed set, remove and query destination options for services
* firewall.core.io.service: Source ports have not been checked in _check_config
OBS-URL: https://build.opensuse.org/request/show/404198
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=21
2016-06-24 16:39:08 +02:00
|
|
|
%{_bindir}/firewallctl
|
2016-02-02 11:43:37 +01:00
|
|
|
%dir %{_datadir}/bash-completion/completions
|
|
|
|
|
%{_datadir}/bash-completion/completions/firewall-cmd
|
2016-09-03 20:36:06 +02:00
|
|
|
%{_libexecdir}/firewalld
|
2016-02-02 11:43:37 +01:00
|
|
|
%{_datadir}/polkit-1
|
Accepting request 399135 from home:markoschandras:network
- Update to version 0.4.2
* New module to search for and change ifcfg files for interfaces
not under control of NM
* firewall_config: Enhanced messages in status bar
* firewall-config: New message window as overlay if not connected
* firewall-config: Fix sentivity of option, view menus and main
paned if not connected
* firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
some cleanup
* firewall-[offline]cmd: Show target in zone information
* D-Bus: Completed masquerade methods in FirewallClientZoneSettings
* Fixed log-denied rules for icmp-blocks
* Keep sorting of interfaces, services, icmp-blocks and other
settings in zones
* Fixed runtime-to-permanent not to save interfaces under control
of NM
* New icmp-block-inversion flag in the zones
* ICMP type filtering in the zones
* New services: sip, sips, managesieve
* rich rules: Allow destination action (RHBZ#1163428)
* firewall-offline-cmd: New option -q/--quiet
* firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
* firewall-[offline-]cmd: Fix option for setting the destination
address
* firewall-config: Fixed resizing behaviour
* New transaction model for speed ups in start, restart, stop and
other actions
* firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
* Fixed memory leak in dbus_introspection_add_properties
* Landscape.io fixes, pylint calm downs
OBS-URL: https://build.opensuse.org/request/show/399135
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=17
2016-06-01 12:15:39 +02:00
|
|
|
%config %{_sysconfdir}/rpm/macros.firewalld
|
2016-02-02 11:43:37 +01:00
|
|
|
%dir %{_sysconfdir}/dbus-1
|
|
|
|
|
%dir %{_sysconfdir}/dbus-1/system.d
|
2017-11-16 09:13:55 +01:00
|
|
|
%dir %{_sysconfdir}/modprobe.d
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/modprobe.d/firewalld-sysctls.conf
|
2016-09-03 20:36:06 +02:00
|
|
|
%dir %{_datadir}/firewalld/tests
|
|
|
|
|
%attr(0750,root,root) %{_datadir}/firewalld/tests/*.sh
|
2016-02-02 11:43:37 +01:00
|
|
|
%config(noreplace) %{_sysconfdir}/firewalld/firewalld.conf
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/firewalld/lockdown-whitelist.xml
|
2016-09-03 20:36:06 +02:00
|
|
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld
|
2016-02-02 11:43:37 +01:00
|
|
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/icmptypes
|
|
|
|
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/services
|
|
|
|
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/zones
|
Accepting request 438020 from home:markoschandras:network
- Update to version 0.4.4
* firewall-applet: Use PyQt5
* firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
D-Bus property
* New helpers Q.931 and RAS from nf_conntrack_h323
* firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
* firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
table
* New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
sane, sip, snmp and tftp
* firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
* firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
sequences
* Misc bug fixes.
* For the complete list of changes please see:
https://github.com/t-woerner/firewalld/releases/tag/v0.4.4
OBS-URL: https://build.opensuse.org/request/show/438020
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=32
2016-11-01 01:20:31 +01:00
|
|
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/ipsets
|
|
|
|
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/helpers
|
2016-02-02 11:43:37 +01:00
|
|
|
%{_unitdir}/firewalld.service
|
2017-11-28 13:33:13 +01:00
|
|
|
%{_fillupdir}/sysconfig.%{name}
|
2016-02-02 11:43:37 +01:00
|
|
|
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/FirewallD.conf
|
2017-11-08 21:06:03 +01:00
|
|
|
%attr(0755,root,root) %dir %{python3_sitelib}/firewall
|
|
|
|
|
%{_datadir}/firewalld/__pycache__
|
|
|
|
|
%{python3_sitelib}/firewall/*
|
2016-02-02 11:43:37 +01:00
|
|
|
%{_mandir}/man1/firewall*cmd*.1*
|
|
|
|
|
%{_mandir}/man1/firewalld*.1*
|
Accepting request 404198 from home:markoschandras:network
- Update to version 0.4.3
* New firewallctl utility (RHBZ#1147959)
* doc.xml.seealso: Show firewalld.dbus in See Also sections
* firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (RHBZ#1339251)
* {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
* firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
* firewall-cmd: Dropped duplicate setType call in --new-ipset
* radius service: Support also tcp ports (RBZ#1219717)
* xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
* config.xmlschema.service.xsd: Fix service destination conflicts (RHBZ#1296573)
* firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
* firewall.command: Only print summary and description in print_X_info with verbose
* firewall.command: print_msg should be able to print empty lines
* firewall-config: No processing of runtime passthroughs signals in permanent
* Landspace.io fixes and pylint calm downs
* firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
* firewall-config: Fixed titles of command and context dialogs, also entry lenths
* firewall-config: pylint calm downs
* firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
* firewall-config: Use self.active_zoens in conf_zone_added_cb
* firewall.command: New parse_port, extended parse methods with more checks
* firewall.command: Fixed parse_port to use the separator in the split call
* firewall.command: New [de]activate_exception_handler, raise error in parse_X
* services ha: Allow corosync-qnetd port
* firewall-applet: Support for kde5-nm-connection-editor
* tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
* firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
* tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
* firewall-cmd: Fixed set, remove and query destination options for services
* firewall.core.io.service: Source ports have not been checked in _check_config
OBS-URL: https://build.opensuse.org/request/show/404198
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=21
2016-06-24 16:39:08 +02:00
|
|
|
%{_mandir}/man1/firewallctl*.1*
|
2016-02-02 11:43:37 +01:00
|
|
|
%{_mandir}/man5/firewall*.5*
|
|
|
|
|
|
|
|
|
|
%files -n firewall-applet
|
|
|
|
|
%attr(0755,root,root) %{_bindir}/firewall-applet
|
|
|
|
|
%dir %{_sysconfdir}/firewall
|
|
|
|
|
%config(noreplace) %{_sysconfdir}/firewall/applet.conf
|
|
|
|
|
%{_sysconfdir}/xdg/autostart/firewall-applet.desktop
|
|
|
|
|
%{_datadir}/icons/hicolor/*/apps/firewall-applet*.*
|
|
|
|
|
%{_mandir}/man1/firewall-applet*.1*
|
|
|
|
|
|
|
|
|
|
%files -n firewall-config
|
|
|
|
|
%dir %{_datadir}/firewalld
|
|
|
|
|
%attr(0755,root,root) %{_bindir}/firewall-config
|
|
|
|
|
%{_datadir}/firewalld/firewall-config.glade
|
|
|
|
|
%attr(0755,root,root) %{_datadir}/firewalld/gtk3_chooserbutton.py*
|
Accepting request 399135 from home:markoschandras:network
- Update to version 0.4.2
* New module to search for and change ifcfg files for interfaces
not under control of NM
* firewall_config: Enhanced messages in status bar
* firewall-config: New message window as overlay if not connected
* firewall-config: Fix sentivity of option, view menus and main
paned if not connected
* firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
some cleanup
* firewall-[offline]cmd: Show target in zone information
* D-Bus: Completed masquerade methods in FirewallClientZoneSettings
* Fixed log-denied rules for icmp-blocks
* Keep sorting of interfaces, services, icmp-blocks and other
settings in zones
* Fixed runtime-to-permanent not to save interfaces under control
of NM
* New icmp-block-inversion flag in the zones
* ICMP type filtering in the zones
* New services: sip, sips, managesieve
* rich rules: Allow destination action (RHBZ#1163428)
* firewall-offline-cmd: New option -q/--quiet
* firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
* firewall-[offline-]cmd: Fix option for setting the destination
address
* firewall-config: Fixed resizing behaviour
* New transaction model for speed ups in start, restart, stop and
other actions
* firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
* Fixed memory leak in dbus_introspection_add_properties
* Landscape.io fixes, pylint calm downs
OBS-URL: https://build.opensuse.org/request/show/399135
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=17
2016-06-01 12:15:39 +02:00
|
|
|
%attr(0755,root,root) %{_datadir}/firewalld/gtk3_niceexpander.py*
|
2016-02-02 11:43:37 +01:00
|
|
|
%{_datadir}/applications/firewall-config.desktop
|
|
|
|
|
%dir %{_datadir}/appdata
|
|
|
|
|
%{_datadir}/appdata/firewall-config.appdata.xml
|
|
|
|
|
%{_datadir}/icons/hicolor/*/apps/firewall-config*.*
|
|
|
|
|
%{_datadir}/glib-2.0/schemas/org.fedoraproject.FirewallConfig.gschema.xml
|
|
|
|
|
%{_mandir}/man1/firewall-config*.1*
|
|
|
|
|
|
2016-03-08 14:58:56 +01:00
|
|
|
%files lang -f %{name}.lang
|
|
|
|
|
|
2016-02-02 11:43:37 +01:00
|
|
|
%changelog
|
