Accepting request 250027 from Base:System
added firewall file OBS-URL: https://build.opensuse.org/request/show/250027 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rsyslog?expand=0&rev=94
This commit is contained in:
commit
4da1edce27
@ -1,3 +1,8 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Wed Sep 17 09:40:40 UTC 2014 - wagner-thomas@gmx.at
|
||||||
|
|
||||||
|
- added firewall template file
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Fri Aug 22 14:37:57 UTC 2014 - mt@suse.de
|
Fri Aug 22 14:37:57 UTC 2014 - mt@suse.de
|
||||||
|
|
||||||
|
29
rsyslog.firewall
Normal file
29
rsyslog.firewall
Normal file
@ -0,0 +1,29 @@
|
|||||||
|
## Name: Syslog Server
|
||||||
|
## Description: Opens ports to accept remote syslog entries.
|
||||||
|
|
||||||
|
# space separated list of allowed TCP ports
|
||||||
|
TCP=""
|
||||||
|
|
||||||
|
# space separated list of allowed UDP ports
|
||||||
|
UDP="syslog"
|
||||||
|
|
||||||
|
# space separated list of allowed RPC services
|
||||||
|
RPC=""
|
||||||
|
|
||||||
|
# space separated list of allowed IP protocols
|
||||||
|
IP=""
|
||||||
|
|
||||||
|
# space separated list of allowed UDP ports that accept broadcasts
|
||||||
|
BROADCAST=""
|
||||||
|
|
||||||
|
### variables below are only needed in very special cases
|
||||||
|
|
||||||
|
# space separated list of net,protocol[,sport[,dport]]
|
||||||
|
# see FW_SERVICES_ACCEPT_RELATED_EXT
|
||||||
|
# net 0/0 means IPv4 and IPv6. If this sevice should only work for
|
||||||
|
# IPv4 use 0.0.0.0/0
|
||||||
|
RELATED=""
|
||||||
|
|
||||||
|
# additional kernel modules needed for this service
|
||||||
|
# see FW_LOAD_MODULES
|
||||||
|
MODULES=""
|
@ -181,6 +181,7 @@ Source11: module-relp
|
|||||||
Source12: module-snmp
|
Source12: module-snmp
|
||||||
Source13: module-udpspoof
|
Source13: module-udpspoof
|
||||||
Source14: http://www.rsyslog.com/files/download/rsyslog/rsyslog-doc-%{upstream_version}.tar.gz
|
Source14: http://www.rsyslog.com/files/download/rsyslog/rsyslog-doc-%{upstream_version}.tar.gz
|
||||||
|
Source15: rsyslog.firewall
|
||||||
|
|
||||||
# PATCH-FIX-OPENSUSE rsyslog-unit.patch crrodriguez@opensuse.org Customize upstream systemd unit for openSUSE needs.
|
# PATCH-FIX-OPENSUSE rsyslog-unit.patch crrodriguez@opensuse.org Customize upstream systemd unit for openSUSE needs.
|
||||||
Patch0: rsyslog-unit.patch
|
Patch0: rsyslog-unit.patch
|
||||||
@ -733,6 +734,9 @@ install -m0640 %{SOURCE6} %{buildroot}%{APPARMOR_PROFILE_PATH}/
|
|||||||
install -m0640 %{SOURCE13} %{buildroot}%{APPARMOR_PROFILE_PATH}/rsyslog.d/
|
install -m0640 %{SOURCE13} %{buildroot}%{APPARMOR_PROFILE_PATH}/rsyslog.d/
|
||||||
%endif
|
%endif
|
||||||
|
|
||||||
|
# firewall config
|
||||||
|
install -m 644 -D %{SOURCE15} %{buildroot}/%{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/%{name}
|
||||||
|
|
||||||
%clean
|
%clean
|
||||||
if [ -n "%{buildroot}" ] && [ "%{buildroot}" != "/" ] ; then
|
if [ -n "%{buildroot}" ] && [ "%{buildroot}" != "/" ] ; then
|
||||||
rm -rf "%{buildroot}"
|
rm -rf "%{buildroot}"
|
||||||
@ -941,6 +945,7 @@ fi
|
|||||||
%endif
|
%endif
|
||||||
%{APPARMOR_PROFILE_PATH_DIR_COMMANDS}
|
%{APPARMOR_PROFILE_PATH_DIR_COMMANDS}
|
||||||
%config %{APPARMOR_PROFILE_PATH}/usr.sbin.rsyslogd
|
%config %{APPARMOR_PROFILE_PATH}/usr.sbin.rsyslogd
|
||||||
|
%config(noreplace) %attr(0644,root,root) %{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/%{name}
|
||||||
|
|
||||||
%files doc
|
%files doc
|
||||||
%defattr(-,root,root)
|
%defattr(-,root,root)
|
||||||
|
Loading…
Reference in New Issue
Block a user