rpm/firewalld
SHA256
1
0
Fork 0
forked from pool/firewalld
Code Pull Requests Activity
204 Commits 1 Branch 0 Tags 3 MiB
938d174cad
Commit Graph

204 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Ana Guerrero
938d174cad Accepting request 1175577 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1175577
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=88
 2024-05-22 19:29:02 +00:00
Robert Frohl
e6f55ec60e Accepting request 1172979 from home:dirkmueller:Factory 
- update to 2.1.2:
  * fix(policy): allow forward ports w/ to-addr for egress-
    zone=HOST
  * fix(rich): fix range check for large rule limit
  * fix(tests): fix skip detection in fw-in-container environment

  * fix(nm): release NM client after a timeout (d534f07)
- python3-dbus isn't correct either, it's python3-dbus-python.
- Correct Requires, python3-slip-dbus -> python3-dbus.
- fix(cli): all --list-all-zones output identical (boo#1213609)
    changes.
    https://github.com/firewalld/firewalld/releases/tag/v2.0.0
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - ipset, ebtables and iptables are purely optional and deprecated,
- Replace references to /var/adm/fillup-templates with new
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch

OBS-URL: https://build.opensuse.org/request/show/1172979
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=162
 2024-05-21 13:11:06 +00:00
Ana Guerrero
e9a6b896ea Accepting request 1142601 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1142601
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=87
 2024-01-30 17:24:17 +00:00
Mohd Saquib
2994173908 Accepting request 1142599 from home:msaquib:branches:security:netfilter 
- update to 2.1.1:
  * fix(offline-cmd): use family when creating ipset (64f78a9)
  * fix(firewall-config): allow rich rule forwarded ports to be logged (d46ea62)
  * fix(ipXtables): log forwarded ports only (07dc202)
  * fix(nftables): log forwarded ports (5c26b73)
  * fix(io.ipset): raise exception if entries exceed limit (a2da5fb)
  * fix(policy): ipXtables: multiple policies using same zone (b6f2f09)
  * fix(policy): dispatch update for active policies (7f6f0e2)

OBS-URL: https://build.opensuse.org/request/show/1142599
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=160
 2024-01-29 17:11:03 +00:00
Ana Guerrero
0ebe659ca7 Accepting request 1137494 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1137494
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=86
 2024-01-09 19:48:31 +00:00
Mohd Saquib
d2da4cedb0 Accepting request 1137493 from home:msaquib:branches:security:netfilter 
- update to 2.1.0:
  * eat(service): add DNS over QUIC (DoQ) Service (5130430)
  * feat(icmp): add ICMPv6 Multicast Listener Discovery (MLD) types (dd88bbf)
  * feat(fw): add ReloadPolicy option in firewalld.conf (0019371)
  * feat(service): add submission service (tcp 587) (d6a9561)
  * feat(service): Add alvr (3a92358)
  * feat(service): add vrrp (d62fc8d)
  [* Renamed patch 0002-Disable-FlushAllOnReload-option.patch to
     0001-Disable-FlushAllOnReload-option.patch
  [* Renamed patch firewalld-runstatedir.patch to 0002-firewalld-runstatedir.patch]

OBS-URL: https://build.opensuse.org/request/show/1137493
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=158
 2024-01-08 08:29:12 +00:00
Ana Guerrero
f4d6521970 Accepting request 1129728 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1129728
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=85
 2023-11-30 20:59:08 +00:00
Mohd Saquib
2f305546a6 Accepting request 1129725 from home:msaquib:branches:security:netfilter 
- update to 2.0.2:
  * fix(policy): runtime dispatch update if *-zone=ANY (e8b9637)
  * fix(nm): release NM client after a timeout (d534f07)

OBS-URL: https://build.opensuse.org/request/show/1129725
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=156
 2023-11-29 07:21:58 +00:00
Ana Guerrero
a06de8084d Accepting request 1114901 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1114901
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=84
 2023-10-25 16:01:56 +00:00
Mohd Saquib
696e343d98 Accepting request 1114900 from home:msaquib:branches:security:netfilter 
- update to 2.0.1:
  * fix(cli): all --list-all-zones output identical (d30bc61)
  * fix(cli): properly show default zone attribute (ea8d9a8)
  * fix(cli): properly show active attribute for zones and policies (b202403)
  * fix(cli): --get-active-zones should include the default zone (dae9112)
  * fix(nftables): always flush main table on start (cd20981)
  * fix(runtimeToPermanent): deepcopy settings before mangling (9c53639)
  * docs: fix reference to lockdown-whitelist.xml in SYNOPSIS section (1c77205)
  * fix(firewall-config): escape markup stored in bindings store (c876fd0)
  * fix(tests): avoid deprecated assertRaisesRegexp for assertRaisesRegex (2935119)
  * fix(icmp): fix check_icmpv6_name() to use correct IPv6 names (af3c35b)
  * fix(ipset): fix configuring IP range for ipsets with nftables (6a050ec)
  * fix(ipset): fix configuring "timeout","maxelem" values for ipsets with nftables (7d3340c)
  * fix(core): fix exception while parsing invalid "tcp-mss-clamp" in policy (ff61209)
  * docs(policy): fix wrong documentation of in man firewalld.policy (21026d9)
- removed following patch:
  [- fix_list_all_zones_output.patch]

OBS-URL: https://build.opensuse.org/request/show/1114900
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=154
 2023-10-03 06:46:08 +00:00
Ana Guerrero
2e2f715c40 Accepting request 1113350 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1113350
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=83
 2023-09-25 18:00:01 +00:00
Mohd Saquib
3aec93e256 Accepting request 1113321 from home:StevenK:branches:security:netfilter 
- python3-dbus isn't correct either, it's python3-dbus-python.

OBS-URL: https://build.opensuse.org/request/show/1113321
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=152
 2023-09-25 05:39:28 +00:00
Mohd Saquib
b4fe948076 Accepting request 1112692 from home:StevenK:branches:security:netfilter 
- Correct Requires, python3-slip-dbus -> python3-dbus.

OBS-URL: https://build.opensuse.org/request/show/1112692
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=151
 2023-09-21 07:54:25 +00:00
Ana Guerrero
af6600100e Accepting request 1105433 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1105433
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=82
 2023-08-28 15:11:07 +00:00
Mohd Saquib
2ec7c43968 Accepting request 1105432 from home:msaquib:branches:security:netfilter 
- fix(cli): all --list-all-zones output identical (boo#1213609) 
  [+ fix_list_all_zones_output.patch]

OBS-URL: https://build.opensuse.org/request/show/1105432
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=149
 2023-08-23 08:21:51 +00:00
Dominique Leuenberger
7112b2be98 Accepting request 1095079 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1095079
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=81
 2023-06-25 19:41:57 +00:00
Mohd Saquib
9bdb6d4a6f Accepting request 1095078 from home:msaquib:branches:security:netfilter 
- update to version 2.0.0:
  * This is a major release. The major version is being bumped symbolically
    to reflect significant changes done in commit f4d2b80 ("fix(policy):
    disallow zone drifting"). It does not contain any deliberate breaking
    changes. 
  * Complete changelog:
    https://github.com/firewalld/firewalld/releases/tag/v2.0.0

OBS-URL: https://build.opensuse.org/request/show/1095078
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=147
 2023-06-24 15:10:37 +00:00
Dominique Leuenberger
9b0e817248 Accepting request 1093236 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1093236
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=80
 2023-06-17 20:19:58 +00:00
Mohd Saquib
698d019100 Accepting request 1093235 from home:msaquib:branches:security:netfilter 
- update to 1.3.3:
  * fix(reload): restore policy for old backend if it changed (de85849)
  * fix(io): rich: tcp mss: handle value=None (8016f10)
  * fix(firewall-config): rich: set destination address (f6641a9)
  * fix(policy): mixed IP families in ingress/egress (69ed4d6)

OBS-URL: https://build.opensuse.org/request/show/1093235
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=145
 2023-06-15 07:53:32 +00:00
Dominique Leuenberger
ac09a8ad80 Accepting request 1087468 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1087468
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=79
 2023-05-17 08:52:48 +00:00
Callum Farmer
e945f49835 Accepting request 1087467 from home:gmbr3:Active 
- Add firewalld-runstatedir.patch: change pid file location from
  /var/run to /run

OBS-URL: https://build.opensuse.org/request/show/1087467
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=143
 2023-05-16 20:04:59 +00:00
Dominique Leuenberger
df7827d38b Accepting request 1082734 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1082734
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=78
 2023-04-26 15:24:22 +00:00
Mohd Saquib
b09aab8023 Accepting request 1082733 from home:msaquib:branches:security:netfilter 
update to version 1.3.2

OBS-URL: https://build.opensuse.org/request/show/1082733
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=141
 2023-04-25 11:30:15 +00:00
Dominique Leuenberger
cdade9ab52 Accepting request 1080031 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1080031
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=77
 2023-04-20 13:13:25 +00:00
Mohd Saquib
f978c8b5bd Accepting request 1080030 from home:msaquib:branches:security:netfilter 
- update to 1.3.1:
  * fix(fw_nm): use IP interface names for connection lookup (18c8b81)
  * fix(fw_policy): raise exceptions (5ae9322)
  * fix(service): include: when used with rich rule (986f0be)
  * fix(nftables): rich: log: limit was not taking effect (0dc0575)
  * fix(build): rpm must build all as prerequisite (6896748)
  * fix: use error codes for FirewallError instances (370e5f2)
  * fix(ipset): chunk entries when restoring set (8a88855)
  * fix(applet): allows using KDE network connection editor (29c8ef6)

OBS-URL: https://build.opensuse.org/request/show/1080030
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=139
 2023-04-18 03:33:16 +00:00
Dominique Leuenberger
d7fc07ad76 Accepting request 1056418 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1056418
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=76
 2023-01-07 16:16:22 +00:00
Callum Farmer
430d717ca5 Accepting request 1056417 from home:gmbr3:Active 
- update to 1.3.0:
  * feat(service): add Warpinator
  * feat(dbus): reset to default settings
  * feat(service): add bareos-director bareos-filedaemon
    bareos-storage
  * feat(policy): masquerade: allow ingress zone to have interface
  * feat(service): add Nebula service
  * feat(service): add Ceph Prometheus exporter
  * feat(service): add OMG DDS service definition
  * feat(service): add llmnr-client service
  * feat(service): add ps2link service
  * feat(service): add definition for syncthing-relay

OBS-URL: https://build.opensuse.org/request/show/1056417
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=137
 2023-01-06 15:16:49 +00:00
Dominique Leuenberger
071b128396 Accepting request 1040347 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1040347
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=75
 2022-12-07 16:34:01 +00:00
Callum Farmer
c577c7773e Accepting request 1040022 from home:dirkmueller:Factory 
- update to 1.2.2:
  * fix(client): raise exception (40a473b)
  * fix(nftables): raise exception (a4b82cc)
  * fix(nftables): invalid conditional statement (e9ca0ad)
  * fix(check_config): use on disk firewalld_conf (d141d6d)
  * fix(service): llmnr: improve description (d233698)
  * Revert "feat(service): Add jellyfin service" (ea154d5)

OBS-URL: https://build.opensuse.org/request/show/1040022
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=135
 2022-12-05 15:44:43 +00:00
Dominique Leuenberger
2609841abf Accepting request 1033616 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1033616
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=74
 2022-11-05 13:46:45 +00:00
Callum Farmer
e903c070c1 Accepting request 1033086 from home:polslinux:branches:security:netfilter 
- Update to 1.2.1:
  * fix(modules): don't error if /proc/modules is missing (a1f091d)
  * fix(readme): format optional <ver> (03e61f2)
  * docs: add protocols to rich and zones (191cea4)
  * docs(policy): add priority attribute to rule (616ed7c)
  * fix(runtimeToPermanent): errors for interfaces not in zone (6b5a70b)
  * fix(failsafe): log exception on fatal failure (af1b8f0)
  * fix(ipset): defer native ipset creation if nftables (ae0ded4)
  * fix(nftables): drop invalid packets before zone dispatch (dc972ae)
  * fix(iptables): drop invalid packets before zone dispatch (83a4608)
  * fix(policies): Splitting interfaces with wildcards (3806e79)
  * fix(ipset): exception on overlap checking empty set (bfe827f)
  * fix(bash): fix ipset commands autocompletion (742669b)
  * docs(README): fix typo (e40b100)
  * fix(treewide): misc typos (d121f0c)
  * fix: firewalld.conf: trim trailing whitespace (21809ed)

OBS-URL: https://build.opensuse.org/request/show/1033086
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=133
 2022-11-04 19:21:10 +00:00
Dominique Leuenberger
240c5fc919 Accepting request 1000604 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/1000604
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=73
 2022-09-02 19:56:25 +00:00
Callum Farmer
aba3e0a056 Accepting request 1000602 from home:schubi2 
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.

OBS-URL: https://build.opensuse.org/request/show/1000602
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=131
 2022-09-01 08:10:40 +00:00
Dominique Leuenberger
a83b740271 Accepting request 992210 from security:netfilter 
- readd ipset buildrequires to reenable ipset support (bsc#1202043)
- readd ebtables too, as there is no builtin support.

OBS-URL: https://build.opensuse.org/request/show/992210
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=72
 2022-08-03 19:16:25 +00:00
Marcus Meissner
2d03b1f242 - readd ebtables too, as there is no builtin support. 
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=129
 2022-08-02 09:19:49 +00:00
Marcus Meissner
1a47df9e35 - readd ipset buildrequires to reenable ipset support (bsc#1202043) 
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=128
 2022-08-02 09:18:12 +00:00
Richard Brown
c108e82e1a Accepting request 991048 from security:netfilter 
- readd iptables requires, as docker uses iptables passthrough
  currently, which calls into iptables (bsc#1201836)

- Also remove ipset, ebtables and iptables from the BuildRequires
  list (compare with change from 2022-03-03 - Thorsten Kukuk <kukuk@suse.com>)

OBS-URL: https://build.opensuse.org/request/show/991048
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=71
 2022-07-26 17:42:23 +00:00
Marcus Meissner
a278031fad - readd iptables requires, as docker uses iptables passthrough 
currently, which calls into iptables (bsc#1201836)

OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=127
 2022-07-25 13:54:24 +00:00
Fabian Vogt
b8a847311d Revert for boo#1201836 
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=70
 2022-07-25 13:07:02 +00:00
Richard Brown
237d4e47b2 Accepting request 989313 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/989313
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=69
 2022-07-21 09:32:44 +00:00
Robert Frohl
50c2870672 Accepting request 989113 from home:trenn:branches:security:netfilter 
- Also remove ipset, ebtables and iptables from the BuildRequires
  list (compare with change from 2022-03-03 - Thorsten Kukuk <kukuk@suse.com>)

OBS-URL: https://build.opensuse.org/request/show/989113
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=126
 2022-07-15 06:25:55 +00:00
Dominique Leuenberger
467626e703 Accepting request 986626 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/986626
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=68
 2022-07-05 10:27:32 +00:00
Callum Farmer
949bf0320d Accepting request 986625 from home:gmbr3:Active 
- Update to 1.2.0:
  * feat(firewalld): add new --log-target parameter
  * feat(service): add snmptls, snmptls-trap services
  * feat(service): add IPFS service
  * feat(fw): startup failsafe
  * feat(service): Add kubelet-readonly
  * feat(service): Add secure version of k8s controller-plane components
  * feat(bash): completion of policy-related commands
  * feat(service): add prometheus node-exporter
  * feat(service): add Kodi JSON-RPC and EventServer services

OBS-URL: https://build.opensuse.org/request/show/986625
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=125
 2022-07-04 11:07:28 +00:00
Dominique Leuenberger
559714d645 Accepting request 984239 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/984239
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=67
 2022-06-24 06:45:08 +00:00
Callum Farmer
d3f927f0c8 Accepting request 984147 from home:schubi2 
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.

OBS-URL: https://build.opensuse.org/request/show/984147
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=124
 2022-06-21 18:20:51 +00:00
Dominique Leuenberger
ea2c2ccba9 Accepting request 966068 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/966068
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=66
 2022-04-02 16:20:03 +00:00
Callum Farmer
09d5965ce8 Accepting request 966067 from home:gmbr3:Active 
- Update to 1.1.1:
  * fix(build): oci: use centos:stream8 instead of ubi:8
  * fix(functions): --check-config fails if direct.xml exists
  * fix(build): oci: use dbus inside the container
  * docs(README): add note about container host integration
  * docs: typo fixes

OBS-URL: https://build.opensuse.org/request/show/966067
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=123
 2022-03-30 17:10:59 +00:00
Dominique Leuenberger
3b54277ca5 Accepting request 964017 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/964017
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=65
 2022-03-24 21:56:57 +00:00
Michał Rostecki
de4b94d2a0 Accepting request 962711 from home:witekbedyk:branches:security:netfilter 
- Provide dummy firewalld-prometheus-config package (bsc#1197042)

This is to prevent file conflicts between Firewalld and Prometheus packages in case Prometheus package is built on a different system than the target one (as it is the case for SUSE Manager).

OBS-URL: https://build.opensuse.org/request/show/962711
OBS-URL: https://build.opensuse.org/package/show/security:netfilter/firewalld?expand=0&rev=122
 2022-03-22 16:26:21 +00:00
Dominique Leuenberger
d5bae943bc Accepting request 960423 from security:netfilter 
OBS-URL: https://build.opensuse.org/request/show/960423
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/firewalld?expand=0&rev=64
 2022-03-11 20:40:55 +00:00