OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nfs-utils?expand=0&rev=13

fw-client

@@ -0,0 +1,26 @@
+## Description: Firewall Configuraion for nfs client.
+#
+# Only the variables TCP, UDP, RPC, IP and BROADCAST are allowed.
+# More may be supported in the future.
+#
+# For a more detailed description of the individual variables see
+# the comments for FW_SERVICES_*_EXT in /etc/sysconfig/SuSEfirewall2
+#
+
+## Name: template service
+## Description: opens ports for foo in order to allow bar
+
+# space separated list of allowed TCP ports
+TCP=""
+
+# space separated list of allowed UDP ports
+UDP=""
+
+# space separated list of allowed RPC services
+RPC="portmap status nlockmgr"
+
+# space separated list of allowed IP protocols
+IP=""
+
+# space separated list of allowed UDP broadcast ports
+BROADCAST=""

fw-server

@@ -0,0 +1,26 @@
+## Description: Firewall Configuraion for nfs kernel server.
+#
+# Only the variables TCP, UDP, RPC, IP and BROADCAST are allowed.
+# More may be supported in the future.
+#
+# For a more detailed description of the individual variables see
+# the comments for FW_SERVICES_*_EXT in /etc/sysconfig/SuSEfirewall2
+#
+
+## Name: template service
+## Description: opens ports for foo in order to allow bar
+
+# space separated list of allowed TCP ports
+TCP=""
+
+# space separated list of allowed UDP ports
+UDP=""
+
+# space separated list of allowed RPC services
+RPC="portmap status nlockmgr mountd nfs nfs_acl"
+
+# space separated list of allowed IP protocols
+IP=""
+
+# space separated list of allowed UDP broadcast ports
+BROADCAST=""

nfs-utils.changes

@@ -1,3 +1,9 @@
+-------------------------------------------------------------------
+Mon Dec 17 02:29:08 CET 2007 - nfbrown@suse.de
+
+- Add SuSEfirewall2 config files for nfs-client and nfs-kernel-server
+  (#247354)
+
 -------------------------------------------------------------------
 Mon Nov 12 12:58:01 CET 2007 - ro@suse.de
 

nfs-utils.spec

@@ -15,7 +15,7 @@ BuildRequires:  e2fsprogs-devel gcc-c++ krb5-devel libevent librpcsecgss nfsidma
 Url:            http://nfs.sourceforge.net
 Summary:        Support Utilities for Kernel nfsd
 Version:        1.1.0
-Release:        8
+Release:        9
 Group:          Productivity/Networking/NFS
 License:        GPL v2 or later
 BuildRoot:      %{_tmppath}/%{name}-%{version}-build
@@ -29,6 +29,8 @@ Source3:        nfsserver.init
 Source4:        sysconfig.nfs-nfs-utils
 Source5:        nfs-kernel-server.xml
 Source6:        README.NFSv4
+Source7:        fw-client
+Source8:        fw-server
 Patch0:         nfs-utils-largefiles.patch
 Patch1:         nfs-utils-1.0.7-bind-syntax.patch
 
@@ -146,6 +148,9 @@ install -m 644 %{SOURCE5} $RPM_BUILD_ROOT/usr/share/omc/srvinfo.d
 mkdir -p -m 755 $RPM_BUILD_ROOT/var/lib/nfs/sm
 mkdir -p -m 755 $RPM_BUILD_ROOT/var/lib/nfs/sm.bak
 touch $RPM_BUILD_ROOT/var/lib/nfs/state
+mkdir -p $RPM_BUILD_ROOT/etc/sysconfig/SuSEfirewall2.d/services
+install -m 0644 %{SOURCE7} ${RPM_BUILD_ROOT}/etc/sysconfig/SuSEfirewall2.d/services/nfs-client
+install -m 0644 %{SOURCE8} ${RPM_BUILD_ROOT}/etc/sysconfig/SuSEfirewall2.d/services/nfs-kernel-server
 
 %clean
 rm -rf $RPM_BUILD_ROOT
@@ -212,6 +217,7 @@ rm -rf $RPM_BUILD_ROOT
 %dir /var/lib/nfs/sm
 %dir /var/lib/nfs/sm.bak
 %ghost /var/lib/nfs/state
+%config %attr(0644,root,root) /etc/sysconfig/SuSEfirewall2.d/services/nfs-client
 
 %files -n nfs-kernel-server
 %defattr(-,root,root)
@@ -235,11 +241,16 @@ rm -rf $RPM_BUILD_ROOT
 %config(noreplace) /var/lib/nfs/xtab
 %config(noreplace) /var/lib/nfs/etab
 %config(noreplace) /var/lib/nfs/rmtab
+%config %attr(0644,root,root) /etc/sysconfig/SuSEfirewall2.d/services/nfs-kernel-server
 
 %files -n nfs-doc
 %defattr(-,root,root)
 %doc nfs/*.html nfs/*.ps linux-nfs/* README.NFSv4
+
 %changelog
+* Mon Dec 17 2007 - nfbrown@suse.de
+- Add SuSEfirewall2 config files for nfs-client and nfs-kernel-server
+  (#247354)
 * Mon Nov 12 2007 - ro@suse.de
 - use navigation icons from latex2html in nfs-utils-doc package
   (#116355)