a89f27b9ca
Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468) OBS-URL: https://build.opensuse.org/request/show/544743 OBS-URL: https://build.opensuse.org/package/show/network:utilities/knock?expand=0&rev=15
148 lines
4.4 KiB
RPMSpec
148 lines
4.4 KiB
RPMSpec
#
|
|
# spec file for package knock
|
|
#
|
|
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via http://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
#Compat macro for new _fillupdir macro introduced in Nov 2017
|
|
%if ! %{defined _fillupdir}
|
|
%define _fillupdir /var/adm/fillup-templates
|
|
%endif
|
|
|
|
%if 0%{?suse_version} > 1210
|
|
%define with_systemd 1
|
|
%else
|
|
%define with_systemd 0
|
|
%endif
|
|
|
|
Name: knock
|
|
Version: 0.7
|
|
Release: 0
|
|
Summary: A Port-Knocking Client
|
|
License: GPL-2.0+
|
|
Group: Productivity/Networking/Security
|
|
Url: http://www.zeroflux.org/knock/
|
|
Source0: http://www.zeroflux.org/proj/knock/files/%{name}-%{version}.tar.gz
|
|
Source1: %{name}d.sysconfig
|
|
Source2: %{name}d.init
|
|
Source3: %{name}d.conf
|
|
Source4: %{name}d.service
|
|
Patch0: %{name}-0.5.patch
|
|
Patch1: %{name}-include.patch
|
|
BuildRequires: libpcap-devel
|
|
%if %{with_systemd}
|
|
BuildRequires: systemd-rpm-macros
|
|
%endif
|
|
BuildRoot: %{_tmppath}/%{name}-%{version}-build
|
|
|
|
%description
|
|
The server part (package knockd) listens to all traffic on an ethernet
|
|
(or PPP) interface, looking for special "knock" sequences of port hits.
|
|
This client makes these port hits by sending a TCP (or UDP) packet to a
|
|
port on the server. This port does not need to be open. Since knockd
|
|
listens at the link-layer level, it sees all traffic even if it is
|
|
destined for a closed port. When the server detects a specific sequence
|
|
of port hits, it runs a command defined in its configuration file. This
|
|
can be used to open up holes in a firewall for quick access.
|
|
|
|
%package -n knockd
|
|
Summary: A port-knocking server
|
|
Group: Productivity/Networking/Security
|
|
%if %{with_systemd}
|
|
%{?systemd_requires}
|
|
%else
|
|
Requires(pre): %insserv_prereq %fillup_prereq
|
|
%endif
|
|
|
|
%description -n knockd
|
|
It listens to all traffic on an ethernet (or PPP) interface, looking
|
|
for special "knock" sequences of port-hits. A client (package knock)
|
|
makes these port-hits by sending a TCP (or UDP) packet to a port on the
|
|
server. This port need not be open -- since knockd listens at the
|
|
link-layer level, it sees all traffic even if it's destined for a
|
|
closed port. When the server detects a specific sequence of port-hits,
|
|
it runs a command defined in its configuration file. This can be used
|
|
to open up holes in a firewall for quick access.
|
|
|
|
%prep
|
|
%setup -q
|
|
%patch0
|
|
%patch1
|
|
|
|
%build
|
|
%configure
|
|
make %{?_smp_mflags}
|
|
|
|
%install
|
|
make DESTDIR=%{buildroot} install %{?_smp_mflags}
|
|
sed -i -e "s:iptables:%{_sbindir}/iptables:" %{SOURCE3}
|
|
install -m 600 -D %{SOURCE3} %{buildroot}%{_sysconfdir}/%{name}d.conf
|
|
%if %{with_systemd}
|
|
install -D -m 644 %{SOURCE4} %{buildroot}/%{_unitdir}/%{name}d.service
|
|
ln -s /usr/sbin/service %{buildroot}%{_sbindir}/rc%{name}d
|
|
%else
|
|
install -m 644 -D %{SOURCE1} %{buildroot}%{_fillupdir}/sysconfig.%{name}d
|
|
install -m 755 -D %{SOURCE2} %{buildroot}%{_sysconfdir}/init.d/%{name}d
|
|
ln -sf ../..%{_initddir}/%{name}d %{buildroot}%{_sbindir}/rc%{name}d
|
|
%endif
|
|
rm -rf %{buildroot}%{_datadir}/doc
|
|
|
|
%if %{with_systemd}
|
|
%pre -n knockd
|
|
%service_add_pre %{name}d.service
|
|
%endif
|
|
|
|
%post -n knockd
|
|
%if %{with_systemd}
|
|
%service_add_post %{name}d.service
|
|
%else
|
|
%fillup_only -n %{name}d
|
|
%endif
|
|
|
|
%preun -n knockd
|
|
%if %{with_systemd}
|
|
%service_del_preun %{name}d.service
|
|
%else
|
|
%stop_on_removal %{name}d
|
|
%endif
|
|
|
|
%postun -n knockd
|
|
%if %{with_systemd}
|
|
%service_del_postun %{name}d.service
|
|
%else
|
|
%insserv_cleanup
|
|
%endif
|
|
|
|
%files
|
|
%defattr(-,root,root)
|
|
%attr(0755,root,root) %{_bindir}/%{name}
|
|
%{_mandir}/man?/%{name}.*
|
|
|
|
%files -n knockd
|
|
%defattr(-,root,root)
|
|
%doc README.md COPYING ChangeLog TODO
|
|
%{_sbindir}/%{name}d
|
|
%if %{with_systemd}
|
|
%{_unitdir}/%{name}d.service
|
|
%else
|
|
%{_sysconfdir}/init.d/%{name}d
|
|
%config %{_fillupdir}/*
|
|
%endif
|
|
%{_sbindir}/rc%{name}d
|
|
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/%{name}d.conf
|
|
%{_mandir}/man?/%{name}d.*
|
|
|
|
%changelog
|