d9178e1022
- Add upstream patch to fix Neighbor Discovery filtering for IPv6 (bsc#1105821) * 0001-nftables-fx-rich-rules-ports-protocols-source-ports.patch - Add upstream patch to fix building rules for multiple IP families (bsc#1108651) * 0001-fw_zone-consider-destination-for-protocols.patch * 0002-fw_zone-fix-services-with-multiple-destination-IP-ve.patch OBS-URL: https://build.opensuse.org/request/show/636192 OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=83
309 lines
11 KiB
RPMSpec
309 lines
11 KiB
RPMSpec
#
|
||
# spec file for package firewalld
|
||
#
|
||
# Copyright (c) 2018 SUSE LINUX GmbH, Nuernberg, Germany.
|
||
#
|
||
# All modifications and additions to the file contributed by third parties
|
||
# remain the property of their copyright owners, unless otherwise agreed
|
||
# upon. The license for this file, and modifications and additions to the
|
||
# file, is the same license as for the pristine package itself (unless the
|
||
# license for the pristine package is not an Open Source License, in which
|
||
# case the license is the MIT License). An "Open Source License" is a
|
||
# license that conforms to the Open Source Definition (Version 1.9)
|
||
# published by the Open Source Initiative.
|
||
|
||
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
||
#
|
||
|
||
|
||
#Compat macro for new _fillupdir macro introduced in Nov 2017
|
||
%if ! %{defined _fillupdir}
|
||
%define _fillupdir %{_localstatedir}/adm/fillup-templates
|
||
%endif
|
||
Name: firewalld
|
||
Version: 0.6.1
|
||
Release: 0
|
||
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
|
||
License: GPL-2.0-or-later
|
||
Group: Productivity/Networking/Security
|
||
Url: http://www.firewalld.org
|
||
Source: https://github.com/%{name}/%{name}/archive/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
||
# PATCH-FIX-SUSE: 0001-firewall-backend-Switch-default-backend-to-iptables.patch (bsc#1102761)
|
||
Patch0: 0001-firewall-backend-Switch-default-backend-to-iptables.patch
|
||
# PATCH-FIX-UPSTREAM firewalld-fix-firewalld-config-crash.patch luc14n0@linuxmail.org -- fix firewall-config crash when nm_get_zone_of_connection returns "False"
|
||
Patch1: firewalld-fix-firewalld-config-crash.patch
|
||
# PATCH-FIX-UPSTREAM 0001-nftables-fix-rich-rules-ports-protocols-source-ports.patch (bsc#1105821)
|
||
Patch2: 0001-nftables-fix-rich-rules-ports-protocols-source-ports.patch
|
||
# PATCH-FIX-UPSTRΕΑΜ 0001-fw_zone-consider-destination-for-protocols.patch
|
||
Patch3: 0001-fw_zone-consider-destination-for-protocols.patch
|
||
# PATCH-FIX-UPSTREAM 0002-fw_zone-fix-services-with-multiple-destination-IP-ve.patch (bsc#1108651)
|
||
Patch4: 0002-fw_zone-fix-services-with-multiple-destination-IP-ve.patch
|
||
BuildRequires: autoconf
|
||
BuildRequires: automake
|
||
BuildRequires: desktop-file-utils
|
||
BuildRequires: docbook-xsl-stylesheets
|
||
# Adding tools to BuildRequires as well so they can be autodetected
|
||
# even though it is probably unlikely for paths to change in the future
|
||
BuildRequires: ebtables
|
||
BuildRequires: fdupes
|
||
BuildRequires: gettext
|
||
BuildRequires: glib2-devel
|
||
BuildRequires: gobject-introspection
|
||
BuildRequires: hicolor-icon-theme
|
||
BuildRequires: intltool
|
||
BuildRequires: ipset
|
||
BuildRequires: iptables
|
||
BuildRequires: libxslt-tools
|
||
BuildRequires: nftables
|
||
BuildRequires: python3-devel
|
||
BuildRequires: systemd-rpm-macros
|
||
Requires: ebtables
|
||
Requires: ipset
|
||
Requires: iptables
|
||
Requires: nftables
|
||
Requires: python3-firewall = %{version}
|
||
Requires: sysconfig
|
||
Requires(post): %fillup_prereq
|
||
Recommends: %{name}-lang
|
||
Suggests: susefirewall2-to-firewalld
|
||
BuildArch: noarch
|
||
%{?systemd_requires}
|
||
|
||
%description
|
||
firewalld is a firewall service daemon that provides a dynamic customizable
|
||
firewall with a D-Bus interface.
|
||
|
||
%package -n python3-firewall
|
||
Summary: Python3 bindings for FirewallD
|
||
Group: Productivity/Networking/Security
|
||
Requires: dbus-1-python3
|
||
Requires: python3-decorator
|
||
Requires: python3-gobject
|
||
Requires: python3-slip-dbus
|
||
|
||
%description -n python3-firewall
|
||
The python3 bindings for firewalld.
|
||
|
||
%package -n firewall-macros
|
||
Summary: FirewallD RPM macros
|
||
Group: Productivity/Networking/Security
|
||
|
||
%description -n firewall-macros
|
||
This package provides the firewalld RPM macros file needed by packages
|
||
which provide their own firewalld service files.
|
||
|
||
%package -n firewall-applet
|
||
Summary: Firewall panel applet
|
||
Group: Productivity/Networking/Security
|
||
Requires: %{name} = %{version}-%{release}
|
||
Requires: firewall-config = %{version}-%{release}
|
||
Requires: hicolor-icon-theme
|
||
Requires: python3-gobject
|
||
Requires: python3-qt5
|
||
|
||
%description -n firewall-applet
|
||
The firewall panel applet provides a status information of firewalld and also
|
||
the firewall settings.
|
||
|
||
%package -n firewall-config
|
||
Summary: Firewall configuration application
|
||
Group: Productivity/Networking/Security
|
||
Requires: %{name} = %{version}-%{release}
|
||
Requires: hicolor-icon-theme
|
||
Requires: python3-gobject-Gdk
|
||
|
||
%description -n firewall-config
|
||
The firewall configuration application provides an configuration interface for
|
||
firewalld.
|
||
|
||
%lang_package
|
||
|
||
%prep
|
||
%setup -q
|
||
%patch0 -p1
|
||
%patch1 -p1
|
||
%patch2 -p1
|
||
%patch3 -p1
|
||
%patch4 -p1
|
||
|
||
# bsc#1078223
|
||
rm config/services/high-availability.xml
|
||
|
||
%build
|
||
export PYTHON="%{_bindir}/python3"
|
||
./autogen.sh
|
||
%configure \
|
||
--enable-sysconfig \
|
||
--enable-rpmmacros \
|
||
--with-ifcfgdir="%{_sysconfdir}/network"
|
||
|
||
# Normally documentation is shipped but this will ensure that missing
|
||
# files will be generated.
|
||
make %{?_smp_mflags}
|
||
|
||
%install
|
||
%make_install
|
||
|
||
%py3_compile %{buildroot}
|
||
|
||
# remove files that shouldn't exist in the final rpms
|
||
rm -r %{buildroot}%{_datadir}/%{name}/__pycache__
|
||
|
||
desktop-file-install --delete-original \
|
||
--dir %{buildroot}%{_sysconfdir}/xdg/autostart \
|
||
%{buildroot}%{_sysconfdir}/xdg/autostart/firewall-applet.desktop
|
||
|
||
desktop-file-install --delete-original \
|
||
--dir %{buildroot}%{_datadir}/applications \
|
||
%{buildroot}%{_datadir}/applications/firewall-config.desktop
|
||
|
||
# fillup_only will take care of that
|
||
%{_bindir}/install -c -D -m 600 %{buildroot}%{_sysconfdir}/sysconfig/firewalld %{buildroot}%{_fillupdir}/sysconfig.%{name}
|
||
rm %{buildroot}%{_sysconfdir}/sysconfig/firewalld
|
||
|
||
ln -sf %{_sbindir}/service %{buildroot}/%{_sbindir}/rcfirewalld
|
||
|
||
# Put RPM macros into /etc/rpm/
|
||
rm %{buildroot}%{_rpmconfigdir}/macros.d/macros.firewalld
|
||
install -D -m644 config/macros.firewalld %{buildroot}%{_sysconfdir}/rpm/macros.firewalld
|
||
|
||
%fdupes %{buildroot}%{python3_sitelib}
|
||
|
||
%find_lang %{name} --all-name
|
||
|
||
%pre
|
||
%service_add_pre firewalld.service
|
||
|
||
%post
|
||
%service_add_post firewalld.service
|
||
%fillup_only firewalld
|
||
|
||
%preun
|
||
%service_del_preun firewalld.service
|
||
|
||
%postun
|
||
# We might a have runtime configuration which we haven't
|
||
# made it permanent yet so restarting the service could be
|
||
# dangerous. It's safer to not touch the firewall ourselves but
|
||
# Let the user restart it whenever he feels like it.
|
||
export DISABLE_RESTART_ON_UPDATE=yes
|
||
%service_del_postun firewalld.service
|
||
|
||
%post -n firewall-applet
|
||
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
|
||
|
||
%postun -n firewall-applet
|
||
if [ $1 -eq 0 ] ; then
|
||
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null
|
||
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
||
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
||
fi
|
||
|
||
%posttrans -n firewall-applet
|
||
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
||
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
||
|
||
%post -n firewall-config
|
||
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null || :
|
||
|
||
%postun -n firewall-config
|
||
if [ $1 -eq 0 ] ; then
|
||
/bin/touch --no-create %{_datadir}/icons/hicolor &>/dev/null
|
||
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
||
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
||
fi
|
||
|
||
%posttrans -n firewall-config
|
||
%{_bindir}/gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
|
||
%{_bindir}/glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
|
||
|
||
%files
|
||
%doc README
|
||
%license COPYING
|
||
%{_sbindir}/firewalld
|
||
%{_sbindir}/rcfirewalld
|
||
%{_bindir}/firewall-cmd
|
||
%{_bindir}/firewall-offline-cmd
|
||
%dir %{_datadir}/bash-completion/completions
|
||
%{_datadir}/bash-completion/completions/firewall-cmd
|
||
%dir %{_libexecdir}/firewalld
|
||
%dir %{_libexecdir}/firewalld/icmptypes
|
||
%dir %{_libexecdir}/firewalld/ipsets
|
||
%dir %{_libexecdir}/firewalld/services
|
||
%dir %{_libexecdir}/firewalld/zones
|
||
%dir %{_libexecdir}/firewalld/helpers
|
||
%{_libexecdir}/firewalld/icmptypes/*.xml
|
||
%{_libexecdir}/firewalld/ipsets/README
|
||
%{_libexecdir}/firewalld/services/*.xml
|
||
%{_libexecdir}/firewalld/zones/*.xml
|
||
%{_libexecdir}/firewalld/helpers/*.xml
|
||
%{_datadir}/polkit-1
|
||
%dir %{_sysconfdir}/dbus-1
|
||
%dir %{_sysconfdir}/dbus-1/system.d
|
||
%dir %{_sysconfdir}/modprobe.d
|
||
%config(noreplace) %{_sysconfdir}/modprobe.d/firewalld-sysctls.conf
|
||
%config(noreplace) %{_sysconfdir}/firewalld/firewalld.conf
|
||
%config(noreplace) %{_sysconfdir}/firewalld/lockdown-whitelist.xml
|
||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld
|
||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/icmptypes
|
||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/services
|
||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/zones
|
||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/ipsets
|
||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/helpers
|
||
%{_unitdir}/firewalld.service
|
||
%{_fillupdir}/sysconfig.%{name}
|
||
%config(noreplace) %{_sysconfdir}/dbus-1/system.d/FirewallD.conf
|
||
%{_mandir}/man1/firewall*cmd*.1%{?ext_man}
|
||
%{_mandir}/man1/firewalld*.1%{?ext_man}
|
||
%{_mandir}/man5/firewall*.5%{?ext_man}
|
||
|
||
%files -n python3-firewall
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/__pycache__
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/config
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/config/__pycache__
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core/__pycache__
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core/io
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/core/io/__pycache__
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/server
|
||
%attr(0755,root,root) %dir %{python3_sitelib}/firewall/server/__pycache__
|
||
%{python3_sitelib}/firewall/__pycache__/*.py*
|
||
%{python3_sitelib}/firewall/*.py*
|
||
%{python3_sitelib}/firewall/config/*.py*
|
||
%{python3_sitelib}/firewall/config/__pycache__/*.py*
|
||
%{python3_sitelib}/firewall/core/*.py*
|
||
%{python3_sitelib}/firewall/core/__pycache__/*.py*
|
||
%{python3_sitelib}/firewall/core/io/*.py*
|
||
%{python3_sitelib}/firewall/core/io/__pycache__/*.py*
|
||
%{python3_sitelib}/firewall/server/*.py*
|
||
%{python3_sitelib}/firewall/server/__pycache__/*.py*
|
||
|
||
%files -n firewall-macros
|
||
%config %{_sysconfdir}/rpm/macros.firewalld
|
||
|
||
%files -n firewall-applet
|
||
%attr(0755,root,root) %{_bindir}/firewall-applet
|
||
%dir %{_sysconfdir}/firewall
|
||
%config(noreplace) %{_sysconfdir}/firewall/applet.conf
|
||
%{_sysconfdir}/xdg/autostart/firewall-applet.desktop
|
||
%{_datadir}/icons/hicolor/*/apps/firewall-applet*.*
|
||
%{_mandir}/man1/firewall-applet*.1%{?ext_man}
|
||
|
||
%files -n firewall-config
|
||
%dir %{_datadir}/firewalld
|
||
%attr(0755,root,root) %{_bindir}/firewall-config
|
||
%{_datadir}/firewalld/firewall-config.glade
|
||
%attr(0755,root,root) %{_datadir}/firewalld/gtk3_chooserbutton.py*
|
||
%attr(0755,root,root) %{_datadir}/firewalld/gtk3_niceexpander.py*
|
||
%{_datadir}/applications/firewall-config.desktop
|
||
%dir %{_datadir}/metainfo
|
||
%{_datadir}/metainfo/firewall-config.appdata.xml
|
||
%{_datadir}/icons/hicolor/*/apps/firewall-config*.*
|
||
%{_datadir}/glib-2.0/schemas/org.fedoraproject.FirewallConfig.gschema.xml
|
||
%{_mandir}/man1/firewall-config*.1%{?ext_man}
|
||
|
||
%files lang -f %{name}.lang
|
||
|
||
%changelog
|