Blame SPECS/conntrack-tools.spec

f17ff5
Name:           conntrack-tools
4c80ce
Version:        1.4.7
4c80ce
Release:        2%{?dist}
f17ff5
Summary:        Manipulate netfilter connection tracking table and run High Availability
f17ff5
License:        GPLv2
f17ff5
URL:            http://conntrack-tools.netfilter.org/
f17ff5
Source0:        http://netfilter.org/projects/%{name}/files/%{name}-%{version}.tar.bz2
f17ff5
Source1:        conntrackd.service
f17ff5
Source2:        conntrackd.conf
f17ff5
4c80ce
Patch01:        0001-build-conntrack-tools-requires-libnetfilter_conntrac.patch
4c80ce
Patch02:        0002-build-don-t-suppress-various-warnings.patch
4c80ce
Patch03:        0003-network-Fix-Wstrict-prototypes.patch
4c80ce
Patch04:        0004-config-Fix-Wimplicit-function-declaration.patch
028103
f17ff5
BuildRequires:  gcc
4c80ce
BuildRequires:  libnfnetlink-devel >= 1.0.1, libnetfilter_conntrack-devel >= 1.0.9
f17ff5
BuildRequires:  libnetfilter_cttimeout-devel >= 1.0.0, libnetfilter_cthelper-devel >= 1.0.0
f17ff5
BuildRequires:  libmnl-devel >= 1.0.3, libnetfilter_queue-devel >= 1.0.2
f17ff5
BuildRequires:  libtirpc-devel systemd-devel
f17ff5
BuildRequires:  pkgconfig bison flex
f17ff5
Provides:       conntrack = 1.0-1
f17ff5
Obsoletes:      conntrack < 1.0-1
f17ff5
Requires(post): systemd
f17ff5
Requires(preun): systemd
f17ff5
Requires(postun): systemd
f17ff5
BuildRequires: systemd
f17ff5
BuildRequires: make
028103
BuildRequires: autoconf
028103
BuildRequires: automake
028103
BuildRequires: libtool
4c80ce
Requires: libnetfilter_conntrack >= 1.0.9
f17ff5
f17ff5
%description
f17ff5
With conntrack-tools you can setup a High Availability cluster and
f17ff5
synchronize conntrack state between multiple firewalls.
f17ff5
f17ff5
The conntrack-tools package contains two programs:
f17ff5
- conntrack: the command line interface to interact with the connection
f17ff5
             tracking system.
f17ff5
- conntrackd: the connection tracking userspace daemon that can be used to
f17ff5
              deploy highly available GNU/Linux firewalls and collect
f17ff5
              statistics of the firewall use.
f17ff5
f17ff5
conntrack is used to search, list, inspect and maintain the netfilter
f17ff5
connection tracking subsystem of the Linux kernel.
f17ff5
Using conntrack, you can dump a list of all (or a filtered selection  of)
f17ff5
currently tracked connections, delete connections from the state table, 
f17ff5
and even add new ones.
f17ff5
In addition, you can also monitor connection tracking events, e.g. 
f17ff5
show an event message (one line) per newly established connection.
f17ff5
f17ff5
%prep
028103
%autosetup -p1
f17ff5
f17ff5
%build
028103
autoreconf -fi
028103
rm -Rf autom4te*.cache config.h.in~
f17ff5
%configure --disable-static --enable-systemd
f17ff5
%make_build
f17ff5
chmod 644 doc/sync/primary-backup.sh
f17ff5
rm -f doc/sync/notrack/conntrackd.conf.orig doc/sync/alarm/conntrackd.conf.orig doc/helper/conntrackd.conf.orig
f17ff5
f17ff5
%install
f17ff5
%make_install
f17ff5
find %{buildroot} -type f -name "*.la" -exec rm -f {} ';'
f17ff5
mkdir -p %{buildroot}%{_sysconfdir}/conntrackd
f17ff5
install -d -m 0755 %{buildroot}%{_unitdir}
f17ff5
install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/
f17ff5
install -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/conntrackd/
f17ff5
f17ff5
%files
f17ff5
%license COPYING
f17ff5
%doc AUTHORS TODO doc
f17ff5
%dir %{_sysconfdir}/conntrackd
f17ff5
%config(noreplace) %{_sysconfdir}/conntrackd/conntrackd.conf
f17ff5
%{_unitdir}/conntrackd.service
f17ff5
%{_sbindir}/conntrack
f17ff5
%{_sbindir}/conntrackd
f17ff5
%{_sbindir}/nfct
f17ff5
%{_mandir}/man5/*
f17ff5
%{_mandir}/man8/*
f17ff5
%dir %{_libdir}/conntrack-tools
f17ff5
%{_libdir}/conntrack-tools/*
f17ff5
f17ff5
%post
f17ff5
%systemd_post conntrackd.service
f17ff5
f17ff5
%preun
f17ff5
%systemd_preun conntrackd.service
f17ff5
f17ff5
%postun
f17ff5
%systemd_postun conntrackd.service 
f17ff5
f17ff5
%changelog
4c80ce
* Wed Dec 14 2022 Phil Sutter <psutter@redhat.com> - 1.4.7-2
4c80ce
- Explicitly depend on libnetfilter_conntrack-1.0.9
4c80ce
4c80ce
* Thu Dec 01 2022 Phil Sutter <psutter@redhat.com> - 1.4.7-1
4c80ce
- config: Fix -Wimplicit-function-declaration
4c80ce
- network: Fix -Wstrict-prototypes
4c80ce
- build: don't suppress various warnings
4c80ce
- build: conntrack-tools requires libnetfilter_conntrack >= 1.0.9
4c80ce
- New version 1.4.7
4c80ce
4c80ce
* Tue Nov 29 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-17
4c80ce
- conntrackd: set default hashtable buckets and max entries if not specified
4c80ce
4c80ce
* Tue Sep 06 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-16
4c80ce
- local: Avoid sockaddr_un::sun_path buffer overflow
4c80ce
4a3166
* Mon Aug 15 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-15
4a3166
- conntrack: fix compiler warnings
4a3166
- src: fix strncpy -Wstringop-truncation warnings
4a3166
- connntrack: Fix for memleak when parsing -j arg
4a3166
- Drop pointless assignments
4a3166
- Don't call exit() from signal handler
4a3166
- read_config_yy: Drop extra argument from dlog() call
4a3166
- helpers: ftp: Avoid ugly casts
4a3166
- Fix potential buffer overrun in snprintf() calls
4a3166
- cache: Fix features array allocation
4a3166
- hash: Flush tables when destroying
4a3166
4a3166
* Mon Mar 28 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-14
4a3166
- conntrackd: use correct max unix path length
4a3166
4a3166
* Thu Mar 24 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-13
4a3166
- conntrackd: Use strdup in lexer
4a3166
- conntrackd: use strncpy() to unix path
4a3166
4a3166
* Tue Mar 15 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-12
4a3166
- Fix source compile in tests.yml
4a3166
4a3166
* Tue Mar 15 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-11
4a3166
- Enable hardened builds again.
4a3166
028103
* Tue Jan 25 2022 Phil Sutter <psutter@redhat.com> - 1.4.5-10
028103
- Drop lazy binding via patch from upstream
028103
- Add patches to fix for failing RPC header search
028103
f17ff5
* Mon Aug 09 2021 Mohan Boddu <mboddu@redhat.com> - 1.4.5-9
f17ff5
- Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
f17ff5
  Related: rhbz#1991688
f17ff5
f17ff5
* Thu Apr 15 2021 Mohan Boddu <mboddu@redhat.com> - 1.4.5-8
f17ff5
- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
f17ff5
f17ff5
* Tue Jan 26 2021 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-7
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
f17ff5
f17ff5
* Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-6
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
f17ff5
f17ff5
* Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-5
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
f17ff5
f17ff5
* Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-4
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
f17ff5
f17ff5
* Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-3
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
f17ff5
f17ff5
* Fri Dec 14 2018 Paul Wouters <pwouters@redhat.com> - 1.4.5-2
f17ff5
- Disable hardened build to really fix rhbz#1413408
f17ff5
f17ff5
* Mon Dec 10 2018 Paul Wouters <pwouters@redhat.com> - 1.4.5-1
f17ff5
- Resolves: rhbz#1574091 conntrack-tools-1.4.5 is available
f17ff5
- Resolves: rhbz#1413408 ct_helper_ftp not working
f17ff5
  (I've reduced the hardening to use -z,lazy)
f17ff5
- Eanbled systemd support
f17ff5
- Bumped required libnetfilter_conntrack-devel to 1.0.7
f17ff5
- fixup harmless but broken mkdir in spec file
f17ff5
- Don't override CPPFLAGS and LIBS, instead fixup src/helpers/Makefile
f17ff5
f17ff5
* Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-8
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
f17ff5
f17ff5
* Thu Apr 12 2018 Orion Poplawski <orion@nwra.com> - 1.4.4-7
f17ff5
- Use libtirpc
f17ff5
- Use %%license
f17ff5
f17ff5
* Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-6
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
f17ff5
f17ff5
* Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-5
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
f17ff5
f17ff5
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-4
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
f17ff5
f17ff5
* Wed Feb 22 2017 Paul Wouters <pwouters@redhat.com> - 1.4.4-3
f17ff5
- Add upstream patches (free pktb after use, nat_tuple leak)
f17ff5
f17ff5
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-2
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
f17ff5
f17ff5
* Thu Sep 22 2016 Paul Wouters <pwouters@redhat.com> - 1.4.4-1
f17ff5
- Updated to 1.4.4 (rhbz#1370668)
f17ff5
- Include new man5 pages
f17ff5
f17ff5
* Wed Apr 20 2016 Paul Wouters <pwouters@redhat.com> - 1.4.3-1
f17ff5
- Resolves: rhbz#1261220 1.4.3 is available
f17ff5
- Update source url
f17ff5
- Remove incorporated patches
f17ff5
f17ff5
* Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.2-11
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
f17ff5
f17ff5
* Fri Aug 21 2015 Paul Wouters <pwouters@redhat.com> - 1.4.2-10
f17ff5
- Resolves: 1255578 - conntrackd could neither be started nor be stopped
f17ff5
f17ff5
* Tue Aug 18 2015 Paul Wouters <pwouters@redhat.com> - 1.4.2-9
f17ff5
- Resolves: rhbz#CVE-2015-6496, rhbz#1253757
f17ff5
- Fold in upstream patches since 1.4.2 release up to git 900d7e8
f17ff5
- Fold in upstream patch set of 2015-08-18 for coverity issues
f17ff5
f17ff5
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-8
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
f17ff5
f17ff5
* Mon Jan 12 2015 Paul Komkoff <i@stingr.net> - 1.4.2-7
f17ff5
- bz#1181119 - wait for network to be on before starting conntrackd
f17ff5
f17ff5
* Sun Jan 11 2015 Paul Komkoff <i@stingr.net> - 1.4.2-6
f17ff5
- bz#998105 - remove patch residues from doc
f17ff5
f17ff5
* Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-5
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
f17ff5
f17ff5
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-4
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
f17ff5
f17ff5
* Sat Dec 21 2013 Paul Komkoff <i@stingr.net> - 1.4.2-3
f17ff5
- rebuilt
f17ff5
f17ff5
* Sat Sep  7 2013 Paul P. Komkoff Jr <i@stingr.net> - 1.4.2-2
f17ff5
- bz#850067
f17ff5
f17ff5
* Sat Sep  7 2013 Paul P. Komkoff Jr <i@stingr.net> - 1.4.2-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.0-3
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
f17ff5
f17ff5
* Fri Feb 08 2013 Paul Komkoff <i@stingr.net> - 1.4.0-2
f17ff5
- fix bz#909128
f17ff5
f17ff5
* Mon Nov 26 2012 Paul P. Komkoff Jr <i@stingr.net> - 1.4.0-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Tue Jul 24 2012 Paul P. Komkoff Jr <i@stingr.net> - 1.2.1
f17ff5
- new upstream version
f17ff5
f17ff5
* Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.1-2
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
f17ff5
f17ff5
* Mon May 07 2012 Paul Wouters <pwouters@redhat.com> - 1.0.1-1
f17ff5
- Updated to 1.0.1
f17ff5
- Added daemon using systemd and configuration file
f17ff5
- Removed legacy spec requirements
f17ff5
- Patch for: parse.c:240:34: error: 'NULL' undeclared 
f17ff5
f17ff5
* Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.0-2
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
f17ff5
f17ff5
* Thu May  5 2011 Paul P. Komkoff Jr <i@stingr.net> - 1.0.0
f17ff5
- new upstream version
f17ff5
f17ff5
* Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.15-2
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
f17ff5
f17ff5
* Fri Nov 19 2010 Paul P. Komkoff Jr <i@stingr.net> - 0.9.15-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Thu Mar 25 2010 Paul P. Komkoff Jr <i@stingr.net> - 0.9.14-1
f17ff5
- update, at last
f17ff5
f17ff5
* Tue Nov 10 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.13-2
f17ff5
- failed to properly commit the package :(
f17ff5
f17ff5
* Tue Oct 13 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.13-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.12-4
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
f17ff5
f17ff5
* Sun May 24 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.12-3
f17ff5
- new upstream version
f17ff5
f17ff5
* Sun May 24 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.12-2
f17ff5
- versioning screwup
f17ff5
f17ff5
* Sun May 24 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.12-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.9-2
f17ff5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
f17ff5
f17ff5
* Tue Jan 13 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.9-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Sun Oct 26 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.8-1
f17ff5
- new upstream version
f17ff5
- remove rollup patch
f17ff5
f17ff5
* Wed Jul 16 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.7-2
f17ff5
- fix Patch0/%%patch.
f17ff5
f17ff5
* Wed Jul 16 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.7-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Sat Feb 23 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.6-0.1.svn7382
f17ff5
- new version from svn
f17ff5
f17ff5
* Fri Feb 22 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-5
f17ff5
- fix the PATH_MAX-related compilation problem
f17ff5
f17ff5
* Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 0.9.5-4
f17ff5
- Autorebuild for GCC 4.3
f17ff5
f17ff5
* Tue Oct 23 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-3
f17ff5
- review fixes
f17ff5
f17ff5
* Sun Oct 21 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-2
f17ff5
- review fixes
f17ff5
f17ff5
* Fri Oct 19 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-1
f17ff5
- new upstream version
f17ff5
f17ff5
* Sun Jul 22 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.4-1
f17ff5
- replace conntrack with conntrack-tools