SHA256
1
0
forked from pool/ufw
Marcus Rückert 2020-11-30 17:17:58 +00:00 committed by Git OBS Bridge
parent c654565e82
commit bc0ff30945
6 changed files with 193 additions and 185 deletions

View File

@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:3d1638bee14ffd1d7d9993c609f1951e0b2968cdcf95dd5ec8f74bb6757bca4e
size 241680

3
ufw-0.36.tar.gz Normal file
View File

@ -0,0 +1,3 @@
version https://git-lfs.github.com/spec/v1
oid sha256:754b22ae5edff0273460ac9f57509c3938187e0cf4fb9692c6a02833fff33cfc
size 580338

View File

@ -1,61 +0,0 @@
#! /bin/bash
# Copyright (c) 2000-2002 SuSE GmbH Nuernberg, Germany.
# Copyright (C) 2003,2004 SUSE Linux AG
# Copyright (C) 2005-2008 SUSE LINUX Products GmbH
#
# Author: LUCE Johann
# Maintainer: LUCE Johann
#
# /etc/init.d/ufw
#
### BEGIN INIT INFO
# Provides: ufw
# Required-Start: $local_fs $remote_fs
# Required-Stop: $local_fs $remote_fs
# Default-Start: 3 5
# Default-Stop: 0 1 2 6
# Short-Description: ufw_enable
# Description: Uncomplicated Firewall
### END INIT INFO
UFWALL="/usr/sbin/ufw"
test -x $UFWALL || exit 5
. /etc/rc.status
. /etc/ufw/ufw.conf
rc_reset
case "$1" in
start)
echo -n "checking if ufw enable"
if [ $ENABLED == 'yes' ] ;then
$UFWALL enable
else
echo -n "ufw is disable"
fi
rc_status -v
;;
stop)
rc_status
;;
restart|force-reload)
$O stop
$0 start
;;
try-restart|reload)
if ($0 status) >/dev/null 2>&1; then
$0 start
else
rc_reset
fi
;;
*)
echo "Usage: $0 {start|stop|status|restart|reload|}"
exit 1
;;
esac
# Set exit status
rc_exit

View File

@ -1,3 +1,116 @@
-------------------------------------------------------------------
Thu Jan 08 13:44:54 UTC 2019 - alexander_naumov@opensuse.org
- Update to version 0.36
* adds snap packaging
* concurrent updates
* many bug fixes
* a new 'prepend' command to better support IPS and dynamic firewalls.
-------------------------------------------------------------------
Fri Dec 30 20:29:23 UTC 2016 - mardnh@gmx.de
- Update to version 0.35
* update check-requirements and README for python 3.5
* update unit tests to not fail when /proc/net/* has no useful information
(Closes: 797020)
* update rsyslog example to use 'stop' instead of the deprecated '~'
(Closes: 798100)
* add --rootdir and --datadir options to ufw and ufw-init to make
relocatable
* files owned by 'clickpkg' are ok too
* add preliminary snappy packaging
* add support for comments (LP: #448503)
* don't allow 'route delete NUM' and suggest 'delete NUM' instead
* move user[6].rules to /etc/ufw (LP: #728128)
* update README: python3 < 3.4 is no longer supported
- remove Source2: ufw.service
* replaced with upstream provided proper systemd-service file
- add support for bash completion
- minor specfile cleanup
-------------------------------------------------------------------
Wed Dec 2 13:22:00 UTC 2015 - p.drouand@gmail.com
- Update to version 0.34
* refactor capabilities checks and only call when needed
* error out early instead of tracing back with iptables errors in
get_netfilter_capabilities() (LP: #1044361)
* fix TypeError which somehow only manifested itself when using zh_CN
* add 'reload' to help (LP: #1059060)
* check-requirements now gives iptables output on failure. Patch thanks to
S. Nizio.
* use conntrack instead of state module. Patch based on work by S. Nizio.
(LP: #1065297)
* don't use get_netfilter_capabilities() with ipv6 if ipv6 is disabled
(LP: #1039729, LP: #1062521)
* fix parse error when finding PPID (LP: #1101304)
* implement before and after hooks in /etc/ufw/(before|after).init
(LP: #1075975) TODO: add tests
* add unit test framework and cleanup, remove dead and refactor some code
* honor UFW_SKIP_CHECKS=1 environment variable with setup.py, which eases
testing
* tests/check-requirements: add a check for -m rt --rt-type 0 (LP: #1191197)
* match simple rule syntax and don't allow ports with esp and ah protocols
with extended rule syntax
* when displaying extended rules via parser.get_command(), show "out" if the
direction is "out" and there is no corresponding interface
* fix return of various invalid extended rules in parser.get_command()
* clarify 'limit' command in man page (LP: #1089262)
* implement route rules (ie, manage FORWARD, LP: #262421). See man page for
details. This change reworked interface parsing and we now allow
interfaces with '_' in the name (LP: #1098472)
* add state RELATED,ESTABLISHED rule to ufw-before-forward in before*.rules
like we do with ufw-before-input. This will only affect systems with ip
forwarding enabled via sysctl
* add ufw[6]-track-forward chain and handle it the same as for
ufw[6]track-input and ufw[6]-track-output
* document ufw[6]-track-* in README (dropped in previous commit)
* fix for 'status' not distingushing between some v4/v6 targets
(LP: #1078665)
* add safe icmp packets packets to ufw-before-forward in before*.rules like
we do for ufw-before-input. This will only affect systems with ip
forwarding enabled via sysctl
* update check-requirements for python 3.3 and 3.4
* add 5269/tcp to XMPP (LP: #1327162)
* fix traceback with forward rule
* import new and updated Launchpad translations:
- po/ar.po, po/ast.po, po/bg.po, po/bs.po, po/ca.po, po/ce.po, po/cs.po,
po/da.po, po/de.po, po/el.po, po/en_AU.po, po/en_GB.po, po/es.po,
po/et.po, po/fi.po, po/fr.po, po/he.po, po/hu.po, po/id.po, po/it.po,
po/ja.po, po/ko.po, po/lv.po, po/nb.po, po/nl.po, po/pl.po, po/pt_BR.po,
po/pt.po, po/ru.po, po/se.po, po/sk.po, po/sl.po, po/sr.po, po/sv.po,
po/tl.po, po/tr.po, po/uk.po, po/ur.po, po/zh_CN.po, po/zh_TW.po
* also use .lower() on translations for 'yes' (LP: #1438647)
* adjust/rearrange before6.rules for rfc4890 'must not be blocked' and
'should not be blocked' (LP: #1434525, LP: #1030214)
* doc/systemd.example: add service file from Ubuntu (LP: #1341083)
* correctly spell qBittorrent (LP: #1273965)
* update man page for app rules (LP: #1155292)
* support igmp protocol (LP: #946322)
* adjust testsuite for systems supporting smtp/udp (LP: #815982)
* enforce that basic commands don't have arguments (LP: #1155250)
* update command completion for --dry-run, --force, --help and route
(LP: #1225666)
* support gre protocol (LP: #1418879)
* support ./setup.py build (LP: #819600)
* doc/ufw.8:
- clarify log level behavior (LP: #1461701)
- add app profile syntax
- add protocol support
* skip profiles with invalid port declarations (LP: #1201934)
* tests/check-locales: skip locales that fail to install or generate
-------------------------------------------------------------------
Tue Apr 7 16:09:56 UTC 2015 - p.drouand@gmail.com
- Remove obsolete macros
- Drop sysvinit support; ufw doesn't build for SLE11 anyway
- Cleanup specfile
- Split out translation files
- Use download Url as source
-------------------------------------------------------------------
Fri Nov 9 12:28:27 UTC 2012 - johann.luce@wanadoo.fr

View File

@ -1,19 +0,0 @@
# This file is part of systemd.
#
# systemd is free software; you can redistribute it and/or modify it
# under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
[Unit]
Description=/etc/init.d/ufw Compatibility
After=network.target
[Service]
ExecStart=/etc/init.d/ufw start
ExecStop=/etc/init.d/ufw stop
StandardOutput=syslog
[Install]
WantedBy=multi-user.target

175
ufw.spec
View File

@ -1,7 +1,7 @@
#
# spec file for package ufw
#
# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
# Copyright (c) 2019 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@ -17,33 +17,31 @@
Name: ufw
Version: 0.33
Version: 0.36
Release: 0
Summary: Uncomplicated Firewall
License: GPL-3.0
License: GPL-3.0-only
Group: Productivity/Networking/Security
Url: http://launchpad.net/%{name}
Source0: %{name}-%{version}.tar.bz2
Source1: ufw-init
Source2: ufw.service
BuildArch: noarch
Url: https://launchpad.net/ufw
Source0: https://launchpad.net/ufw/%{version}/%{version}/+download/%{name}-%{version}.tar.gz
BuildRequires: bash-completion
BuildRequires: iptables
BuildRequires: python-base >= 2.7
BuildRequires: python-devel
%if 0%{?suse_version} > 1140
BuildRequires: systemd
BuildRequires: systemd-rpm-macros
Requires: bash-completion
Recommends: %{name}-lang
BuildArch: noarch
%systemd_requires
%endif
#Requires:
%description
The Uncomplicated Firewall(ufw) is a front-end for netfilter, which
aims to make it easier for people unfamiliar with firewall concepts.
Ufw provides a framework for managing netfilter as well as
manipulating the firewall.
%lang_package
%prep
%setup -q
#Submited patch through ufw's bug report
@ -54,106 +52,83 @@ manipulating the firewall.
#python setup.py build
%install
rm -rf %{buildroot}
python setup.py install --prefix=/usr \
--root %{buildroot}
mkdir -p $RPM_BUILD_ROOT/etc/init.d/
install -m 755 $RPM_SOURCE_DIR/ufw-init $RPM_BUILD_ROOT/etc/init.d/ufw
ln -s /etc/init.d/ufw $RPM_BUILD_ROOT/usr/sbin/rcufw
ln -s /usr/share/man/man8/ufw.8.gz $RPM_BUILD_ROOT/usr/share/man/man8/rcufw.8.gz
mkdir -p $RPM_BUILD_ROOT/usr/bin/
ln -s /usr/sbin/ufw $RPM_BUILD_ROOT/usr/bin/ufw
%if 0%{?suse_version} > 1220
mkdir -p $RPM_BUILD_ROOT/usr/lib/systemd/
mkdir -p $RPM_BUILD_ROOT/usr/lib/systemd/system
install -m 644 $RPM_SOURCE_DIR/ufw.service $RPM_BUILD_ROOT/usr/lib/systemd/system/ufw.service
%else
mkdir -p $RPM_BUILD_ROOT/lib/systemd/
mkdir -p $RPM_BUILD_ROOT/lib/systemd/system
install -m 644 $RPM_SOURCE_DIR/ufw.service $RPM_BUILD_ROOT/lib/systemd/system/ufw.service
%endif
python setup.py install --prefix=%{_prefix} --root %{buildroot}
mkdir -p %{buildroot}/%{_bindir}
install -Dm0644 shell-completion/bash %{buildroot}%{_sysconfdir}/bash_completion.d/ufw.sh
install -Dm0644 doc/systemd.example %{buildroot}%{_unitdir}/%{name}.service
ln -s %{_mandir}/man8/ufw.8.gz %{buildroot}%{_mandir}/man8/rcufw.8.gz
ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name}
ln -s %{_sbindir}/ufw %{buildroot}/%{_bindir}/ufw
%pre
%if 0%{?suse_version} > 1140
%service_add_pre ufw.service
%endif
%post
%if 0%{?suse_version} > 1140
%service_add_post ufw.service
%endif
%preun
%stop_on_removal ufw
%if 0%{?suse_version} > 1140
%service_del_preun ufw.service
%endif
%postun
%restart_on_update
%insserv_cleanup /etc/init.d/ufw
%if 0%{?suse_version} > 1140
%service_del_postun ufw.service
%endif
%files
%defattr(-,root,root)
/lib/ufw/ufw-init
/lib/ufw/ufw-init-functions
/lib/ufw/user.rules
/lib/ufw/user6.rules
/usr/lib/python%python_version/site-packages/ufw-%{version}-py%python_version.egg-info
/usr/sbin/ufw
/usr/sbin/rcufw
/usr/bin/ufw
/usr/share/man/man8/ufw-framework.8.gz
/usr/share/man/man8/ufw.8.gz
/usr/share/man/man8/rcufw.8.gz
%config/etc/init.d/ufw
%config/etc/ufw
%config/etc/ufw/applications.d
%config/etc/default/ufw
%if 0%{?suse_version} > 1220
/usr/lib/systemd/system/ufw.service
%else
/lib/systemd/system/ufw.service
%endif
/lib/ufw
/usr/lib/python%python_version/site-packages/ufw
/usr/share/ufw
/usr/share/ufw/iptables
%lang(zh_TW) /usr/share/ufw/messages/zh_TW.mo
%lang(ar) /usr/share/ufw/messages/ar.mo
%lang(bg) /usr/share/ufw/messages/bg.mo
%lang(ca) /usr/share/ufw/messages/ca.mo
%lang(cs) /usr/share/ufw/messages/cs.mo
%lang(da) /usr/share/ufw/messages/da.mo
%lang(de) /usr/share/ufw/messages/de.mo
%lang(el) /usr/share/ufw/messages/el.mo
%lang(en_AU) /usr/share/ufw/messages/en_AU.mo
%lang(en_GB) /usr/share/ufw/messages/en_GB.mo
%lang(es) /usr/share/ufw/messages/es.mo
%lang(fi) /usr/share/ufw/messages/fi.mo
%lang(fr) /usr/share/ufw/messages/fr.mo
%lang(he) /usr/share/ufw/messages/he.mo
%lang(hu) /usr/share/ufw/messages/hu.mo
%lang(id) /usr/share/ufw/messages/id.mo
%lang(it) /usr/share/ufw/messages/it.mo
%lang(nb) /usr/share/ufw/messages/nb.mo
%lang(nl) /usr/share/ufw/messages/nl.mo
%lang(pl) /usr/share/ufw/messages/pl.mo
%lang(pt) /usr/share/ufw/messages/pt.mo
%lang(pt_BR) /usr/share/ufw/messages/pt_BR.mo
%lang(ru) /usr/share/ufw/messages/ru.mo
%lang(sk) /usr/share/ufw/messages/sk.mo
%lang(dl) /usr/share/ufw/messages/sl.mo
%lang(sr) /usr/share/ufw/messages/sr.mo
%lang(sv) /usr/share/ufw/messages/sv.mo
%lang(tl) /usr/share/ufw/messages/tl.mo
%lang(zh_CN) /usr/share/ufw/messages/zh_CN.mo
%lang(ast) /usr/share/ufw/messages/ast.mo
%lang(bs) /usr/share/ufw/messages/bs.mo
%lang(ja) /usr/share/ufw/messages/ja.mo
%lang(ur) /usr/share/ufw/messages/ur.mo
/lib/ufw/ufw-init
/lib/ufw/ufw-init-functions
%{python_sitelib}/ufw-%{version}-py%{python_version}.egg-info
%{_sbindir}/ufw
%{_sbindir}/rcufw
%{_bindir}/ufw
%{_mandir}/man8/ufw-framework.8%{ext_man}
%{_mandir}/man8/ufw.8%{ext_man}
%{_mandir}/man8/rcufw.8%{ext_man}
%config %{_sysconfdir}/%{name}
%config %{_sysconfdir}/%{name}/applications.d
%config %{_sysconfdir}/default/ufw
%config %{_sysconfdir}/bash_completion.d/ufw.sh
%{_unitdir}/%{name}.service
/lib/ufw
%{python_sitelib}/ufw
%{_datadir}/%{name}
%{_datadir}/%{name}/iptables
%exclude %{_datadir}/%{name}/messages
%files lang
%defattr(-,root,root)
%dir %{_datadir}/%{name}/messages
%lang(zh_TW) %{_datadir}/%{name}/messages/zh_TW.mo
%lang(ar) %{_datadir}/%{name}/messages/ar.mo
%lang(bg) %{_datadir}/%{name}/messages/bg.mo
%lang(ca) %{_datadir}/%{name}/messages/ca.mo
%lang(cs) %{_datadir}/%{name}/messages/cs.mo
%lang(da) %{_datadir}/%{name}/messages/da.mo
%lang(de) %{_datadir}/%{name}/messages/de.mo
%lang(el) %{_datadir}/%{name}/messages/el.mo
%lang(en_AU) %{_datadir}/%{name}/messages/en_AU.mo
%lang(en_GB) %{_datadir}/%{name}/messages/en_GB.mo
%lang(es) %{_datadir}/%{name}/messages/es.mo
%lang(fi) %{_datadir}/%{name}/messages/fi.mo
%lang(fr) %{_datadir}/%{name}/messages/fr.mo
%lang(he) %{_datadir}/%{name}/messages/he.mo
%lang(hu) %{_datadir}/%{name}/messages/hu.mo
%lang(id) %{_datadir}/%{name}/messages/id.mo
%lang(it) %{_datadir}/%{name}/messages/it.mo
%lang(nb) %{_datadir}/%{name}/messages/nb.mo
%lang(nl) %{_datadir}/%{name}/messages/nl.mo
%lang(pl) %{_datadir}/%{name}/messages/pl.mo
%lang(pt) %{_datadir}/%{name}/messages/pt.mo
%lang(pt_BR) %{_datadir}/%{name}/messages/pt_BR.mo
%lang(ru) %{_datadir}/%{name}/messages/ru.mo
%lang(sk) %{_datadir}/%{name}/messages/sk.mo
%lang(dl) %{_datadir}/%{name}/messages/sl.mo
%lang(sr) %{_datadir}/%{name}/messages/sr.mo
%lang(sv) %{_datadir}/%{name}/messages/sv.mo
%lang(tl) %{_datadir}/%{name}/messages/tl.mo
%lang(zh_CN) %{_datadir}/%{name}/messages/zh_CN.mo
%lang(ast) %{_datadir}/%{name}/messages/ast.mo
%lang(bs) %{_datadir}/%{name}/messages/bs.mo
%lang(ja) %{_datadir}/%{name}/messages/ja.mo
%lang(ur) %{_datadir}/%{name}/messages/ur.mo
%changelog