Accepting request 602954 from security:netfilter

- Update to new upstream release 0.8.4

OBS-URL: https://build.opensuse.org/request/show/602954
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/nftables?expand=0&rev=12

nftables-0.8.3.tar.bz2

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:d16be1f5db88e95d29fc0b0e4df88acd079f3ee8e2b872ec7673f9a0d5d95e38
-size 683802

nftables-0.8.4.tar.bz2

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ef372ee4592b07852f4cac233584ead7cbd08fa3041b2d3ff3d3590c8d76769f
+size 649791

nftables.changes

@@ -1,3 +1,21 @@
+-------------------------------------------------------------------
+Wed May  2 06:08:00 UTC 2018 - jengelh@inai.de
+
+- Update to new upstream release 0.8.4
+  * Support to match IPv6 segment routing headers.
+  * New "meta ibrname" and "meta obrname" arguments to match the
+    name of the logical bridge a packet is passing through.
+    These new names replace the old (misnamed) "ibriport"/"obriport".
+  * `nft -a` will now show handle identifier for all objects,
+    including tables and chains.
+  * nft can now delete objects by their handle number.
+  * Support to update maps from the ruleset (packet path).
+  * the "--echo" option now prints handle id for tables and
+    object too.
+  * `nft -f -` will now read from standard input
+  * Support for flow tables, cf. man page or
+    https://lwn.net/Articles/738214/ .
+
 -------------------------------------------------------------------
 Sat Mar  3 22:59:01 UTC 2018 - jengelh@inai.de
 

nftables.spec

@@ -17,7 +17,7 @@
 
 
 Name:           nftables
-Version:        0.8.3
+Version:        0.8.4
 Release:        0
 Summary:        Userspace utility to access the nf_tables packet filter
 License:        GPL-2.0-only
@@ -37,11 +37,11 @@ BuildRequires:  pkg-config >= 0.21
 BuildRequires:  readline-devel
 BuildRequires:  xsltproc
 BuildRequires:  pkgconfig(libmnl) >= 1.0.3
-BuildRequires:  pkgconfig(libnftnl) >= 1.0.9
+BuildRequires:  pkgconfig(libnftnl) >= 1.1.0
 BuildRequires:  pkgconfig(xtables) >= 1.6.0
 
 %description
-nf_tables is a new firewalling mechanism in the Linux kernel, running
+nf_tables is a firewalling mechanism in the Linux kernel, running
 independently of, and thus parallel to, ip_tables, ip6_tables,
 arp_tables and ebtables. nftables is the corresponsing userspace
 frontend.
@@ -61,17 +61,23 @@ export PATH="$PATH:$PWD/bin"
 mkdir obj
 pushd obj/
 %define _configure ../configure
-%configure --disable-silent-rules --docdir="%_docdir/%name"
+%configure --disable-silent-rules --disable-static --docdir="%_docdir/%name"
 make %{?_smp_mflags}
 popd
 
 %install
 b="%buildroot"
 %make_install -C obj
-rm -f "%buildroot/%_libdir/pkgconfig"/*.pc
+rm -f "%buildroot/%_libdir"/*.la
+# No headers, so it is quite pointless to have.
+rm -f "%buildroot/%_libdir"/*.so "%buildroot/%_libdir/pkgconfig"/*.pc
+
+%post   -p /sbin/ldconfig
+%postun -p /sbin/ldconfig
 
 %files
 %defattr(-,root,root)
+%_libdir/libnftables.so.*
 %_sbindir/nft
 %_mandir/man8/nft*
 %doc COPYING