Commit Graph

31 Commits

Author SHA256 Message Date
Dominique Leuenberger
3dd44be1f4 Accepting request 424623 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/424623
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=13
2016-09-07 09:46:32 +00:00
Markos Chandras
34829c4e6b Accepting request 424554 from home:markoschandras:network
- Relax permissions for default installation files. The files in
  /usr/lib/firewalld are the default ones as shipped by the package and
  there is nothing secret in them.

OBS-URL: https://build.opensuse.org/request/show/424554
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=30
2016-09-03 18:36:06 +00:00
Dominique Leuenberger
b1f3a38caf Accepting request 419713 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/419713
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=12
2016-08-18 07:17:53 +00:00
Markos Chandras
d241b03ba1 Accepting request 419706 from home:markoschandras:network
- Update to version 0.4.3.3
  * Fixes CVE-2016-5410 (bsc#992772)
  * Standard error is now used for errors and warnings
  * Several fixes for use in change roots
  * Systemd service file changes
  * Fixed translations in firewall-config
  * Command line clients
  * Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)

OBS-URL: https://build.opensuse.org/request/show/419706
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=28
2016-08-17 08:15:07 +00:00
Dominique Leuenberger
bdf507874d Accepting request 407133 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/407133
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=11
2016-07-09 07:24:06 +00:00
Markos Chandras
dd7624103f Accepting request 406861 from home:markoschandras:network
- Update to version 0.4.3.2
  * Fix regression with unavailable optional commands
  * All missing backend messages should be warnings
  * Individual calls for missing restore commands
  * Only one authenticate call for add and remove options and also
    sequences
  * New service RH-Satellite-6

OBS-URL: https://build.opensuse.org/request/show/406861
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=26
2016-07-07 15:38:49 +00:00
Dominique Leuenberger
a12c6accf8 Accepting request 405522 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/405522
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=10
2016-07-01 08:00:43 +00:00
Markos Chandras
853bee967a Accepting request 405271 from home:markoschandras:network
- Update to version 0.4.3.1
  * firewall.command: Fix python3 DBusException message not interable error
  * src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
  * firewallctl: Do not trace back on list command without further arguments
  * firewallctl (man1): Added remaining sections zone, service, ..
  * firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
  * firewall.server.config: Allow to set IndividualCalls property in config interface
  * Fix missing icmp rules for some zones
  * runProg: Fix issue with running programs
  * firewall-offline-cmd: Fix issues with missing system-config-firewall
  * firewall.core.ipXtables: Split up source and dest addresses for transaction
  * firewall.server.config: Log error in case of loading malformed files in watcher
  * Install and package the firewallctl man page
  * Translation updates

OBS-URL: https://build.opensuse.org/request/show/405271
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=24
2016-06-29 16:56:35 +00:00
Dominique Leuenberger
2d23bc2eea Accepting request 404514 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/404514
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=9
2016-06-29 13:10:22 +00:00
Markos Chandras
d55681d9f4 Accepting request 404513 from home:markoschandras:network
- Remove obsolete patches:
  * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
  * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch

OBS-URL: https://build.opensuse.org/request/show/404513
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=22
2016-06-24 15:06:53 +00:00
Markos Chandras
c78d02d87c Accepting request 404198 from home:markoschandras:network
- Update to version 0.4.3
  * New firewallctl utility (RHBZ#1147959)
  * doc.xml.seealso: Show firewalld.dbus in See Also sections
  * firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (RHBZ#1339251)
  * {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
  * firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
  * firewall-cmd: Dropped duplicate setType call in --new-ipset
  * radius service: Support also tcp ports (RBZ#1219717)
  * xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
  * config.xmlschema.service.xsd: Fix service destination conflicts (RHBZ#1296573)
  * firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
  * firewall.command: Only print summary and description in print_X_info with verbose
  * firewall.command: print_msg should be able to print empty lines
  * firewall-config: No processing of runtime passthroughs signals in permanent
  * Landspace.io fixes and pylint calm downs
  * firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes
  * firewall-config: Fixed titles of command and context dialogs, also entry lenths
  * firewall-config: pylint calm downs
  * firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
  * firewall-config: Use self.active_zoens in conf_zone_added_cb
  * firewall.command: New parse_port, extended parse methods with more checks
  * firewall.command: Fixed parse_port to use the separator in the split call
  * firewall.command: New [de]activate_exception_handler, raise error in parse_X
  * services ha: Allow corosync-qnetd port
  * firewall-applet: Support for kde5-nm-connection-editor
  * tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
  * tests/firewall-cmd_test.sh: New tests for service and icmptype modifications
  * firewall-cmd: Fixed set, remove and query destination options for services
  * firewall.core.io.service: Source ports have not been checked in _check_config

OBS-URL: https://build.opensuse.org/request/show/404198
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=21
2016-06-24 14:39:08 +00:00
Dominique Leuenberger
1d00795d88 Accepting request 402726 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/402726
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=8
2016-06-19 08:49:54 +00:00
Markos Chandras
964d85ea3b Accepting request 400782 from home:markoschandras:network
- Add upstream patch to prevent unconditional dependencies to the
  NetworkManager typelib (gh#t-woerner/firewalld#119)
  * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch

OBS-URL: https://build.opensuse.org/request/show/400782
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=19
2016-06-16 12:54:11 +00:00
Dominique Leuenberger
fdb9172654 Accepting request 399451 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/399451
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=7
2016-06-02 10:39:18 +00:00
Markos Chandras
0d9fd44926 Accepting request 399135 from home:markoschandras:network
- Update to version 0.4.2
  * New module to search for and change ifcfg files for interfaces
    not under control of NM
  * firewall_config: Enhanced messages in status bar
  * firewall-config: New message window as overlay if not connected
  * firewall-config: Fix sentivity of option, view menus and main
    paned if not connected
  * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
    some cleanup
  * firewall-[offline]cmd: Show target in zone information
  * D-Bus: Completed masquerade methods in FirewallClientZoneSettings
  * Fixed log-denied rules for icmp-blocks
  * Keep sorting of interfaces, services, icmp-blocks and other
    settings in zones
  * Fixed runtime-to-permanent not to save interfaces under control
    of NM
  * New icmp-block-inversion flag in the zones
  * ICMP type filtering in the zones
  * New services: sip, sips, managesieve
  * rich rules: Allow destination action (RHBZ#1163428)
  * firewall-offline-cmd: New option -q/--quiet
  * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
  * firewall-[offline-]cmd: Fix option for setting the destination
    address
  * firewall-config: Fixed resizing behaviour
  * New transaction model for speed ups in start, restart, stop and
    other actions
  * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
  * Fixed memory leak in dbus_introspection_add_properties
  * Landscape.io fixes, pylint calm downs

OBS-URL: https://build.opensuse.org/request/show/399135
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=17
2016-06-01 10:15:39 +00:00
Dominique Leuenberger
578047ac82 Accepting request 397882 from security:netfilter
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/397882
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=6
2016-05-30 07:55:52 +00:00
Markos Chandras
05dbfb16ea Accepting request 396544 from home:jengelh:branches:security:netfilter
- Avoid runtime dependency on systemd, the macros can all deal with its absence.

OBS-URL: https://build.opensuse.org/request/show/396544
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=15
2016-05-18 07:38:19 +00:00
Dominique Leuenberger
e78b8a08a4 Accepting request 393420 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/393420
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=5
2016-05-11 14:37:21 +00:00
Markos Chandras
b519233911 Accepting request 392058 from home:markoschandras:network
- Suggest the susefirewall2-to-firewalld package which could assist
  in migrating the SuSEFirewall2 iptables rules to FirewallD.

OBS-URL: https://build.opensuse.org/request/show/392058
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=13
2016-05-03 12:52:41 +00:00
Dominique Leuenberger
ceecd47d16 Accepting request 391254 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/391254
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=4
2016-04-28 14:55:51 +00:00
Markos Chandras
1e9c5f8253 Accepting request 391120 from home:markoschandras:network
- Update to version 0.4.1.2
  * Install fw_nm module
  * firewalld: Do not fail if log file could not be opened
  * Make ipsets visible per default in firewall-config
  * Fixed translations with python3
  [changes in 0.4.1.1]
  * Fix for broken frensh translation
  [changes in 0.4.1]
  * Enhancements of ipset handling
  * No cleanup of ipsets using timeouts while reloading
  * Only destroy conflicting ipsets
  * Only use ipset types supported by the system
  * Add and remove several ipset entries in one call using a file
  * Reduce time frame where builtin chains are on policy DROP while reloading
  * Include descriptions in --info-X calls
  * Command line interface support to get and alter descriptions of zones,
  * services, ipsets and icmptypes with permanent option
  * Properly watch changes in combined zones
  * Fix logging in rich rule forward rules
  * Transformed direct.passthrough errors into warnings
  * Rework of import structures
  * Reduced calls to get ids for port and protocol names (RHBZ#1305434)
  * Build and installation fixes by Markos Chandras
  * Provide D-Bus properties in introspection data
  * Fix for flaws found by landscape.io
  * Fix for repeated SUGHUP
  * New NetworkManager module to get and set zones of connections, used in
    firewall-applet and firewall-config
  * configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
  * Code cleanups

OBS-URL: https://build.opensuse.org/request/show/391120
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=11
2016-04-22 09:08:02 +00:00
Dominique Leuenberger
efc609317f Accepting request 369534 from security:netfilter
1

OBS-URL: https://build.opensuse.org/request/show/369534
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=3
2016-03-16 09:34:57 +00:00
Markos Chandras
13de59c0dd Accepting request 368478 from home:markoschandras:network
Do not recommend a specific version for the lang subpackage

OBS-URL: https://build.opensuse.org/request/show/368478
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=9
2016-03-10 10:45:55 +00:00
Markos Chandras
10ce71a608 Accepting request 364070 from home:markoschandras:network
Move translations to a new subpackage

OBS-URL: https://build.opensuse.org/request/show/364070
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=8
2016-03-08 13:58:56 +00:00
Dominique Leuenberger
4d81e65d1c Accepting request 362870 from security:netfilter
- Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
  /etc/rpm/macros.systemd only check for the 'yes' value so fix it to
  properly prevent the firewalld service from being restarted during
  updates.

- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
  and libnotify dependencies (see OBS SR#360792)

- firewall-config needs typelib(NetworkManager) to run

OBS-URL: https://build.opensuse.org/request/show/362870
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=2
2016-03-01 08:45:28 +00:00
Markos Chandras
ec24c682b8 Accepting request 362864 from home:markoschandras:branches:security:netfilter
Set DISABLE_RESTART_ON_UPDATE to yes instead of 1

OBS-URL: https://build.opensuse.org/request/show/362864
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=6
2016-02-29 10:00:54 +00:00
Markos Chandras
ce9bdf7de2 Accepting request 361023 from home:markoschandras:branches:security:netfilter
Drop typelib(NetworkManager), NetworkManager-glib, gtk3 and libnotify dependencies (see OBS SR#360792)

OBS-URL: https://build.opensuse.org/request/show/361023
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=5
2016-02-29 09:36:35 +00:00
Markos Chandras
569b6e61d2 Accepting request 360789 from home:jirislaby:branches:security:netfilter
firewall-config needs typelib(NetworkManager) to run

xml allows " only, not '

OBS-URL: https://build.opensuse.org/request/show/360789
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=4
2016-02-22 10:50:00 +00:00
Dominique Leuenberger
8daf2a34bd Accepting request 357564 from security:netfilter
New package. FirewallD is a firewall service daemon with D-Bus interface managing a dynamic firewall

OBS-URL: https://build.opensuse.org/request/show/357564
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=1
2016-02-17 09:24:19 +00:00
Markos Chandras
a52b51242a change mode of verify_file to localonly
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=2
2016-02-03 14:17:32 +00:00
d9ec731871 Accepting request 357329 from home:markoschandras:firewalld
I want to maintain firewalld in Factory and would like to use security:netfilter as the devel project

OBS-URL: https://build.opensuse.org/request/show/357329
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=1
2016-02-02 10:43:37 +00:00