|
 |
43df5c |
From 77ff3d215f2a28a9ffc9fe1943c7f2b12d5e4f69 Mon Sep 17 00:00:00 2001
|
|
|
43df5c |
From: Phil Sutter <psutter@redhat.com>
|
|
|
43df5c |
Date: Tue, 5 Jun 2018 14:49:54 +0200
|
|
|
43df5c |
Subject: [PATCH 2/2] utils: Add a man page for nfnl_osf
|
|
|
43df5c |
|
|
|
43df5c |
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=1487331
|
|
|
43df5c |
Upstream Status: iptables commit af468b6e7f35d
|
|
|
43df5c |
|
|
|
43df5c |
commit af468b6e7f35db09af10ae4ec65cc7803180a4b4
|
|
|
43df5c |
Author: Phil Sutter <phil@nwl.cc>
|
|
|
43df5c |
Date: Wed Sep 20 18:54:09 2017 +0200
|
|
|
43df5c |
|
|
|
43df5c |
utils: Add a man page for nfnl_osf
|
|
|
43df5c |
|
|
|
43df5c |
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
|
43df5c |
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
|
43df5c |
|
|
|
43df5c |
Signed-off-by: Phil Sutter <psutter@redhat.com>
|
|
|
43df5c |
---
|
|
|
43df5c |
configure.ac | 3 +-
|
|
|
43df5c |
utils/.gitignore | 1 +
|
|
|
43df5c |
utils/Makefile.am | 4 +++
|
|
|
43df5c |
utils/nfnl_osf.8.in | 67 +++++++++++++++++++++++++++++++++++++++++++++
|
|
|
43df5c |
4 files changed, 74 insertions(+), 1 deletion(-)
|
|
|
43df5c |
create mode 100644 utils/nfnl_osf.8.in
|
|
|
43df5c |
|
|
|
43df5c |
diff --git a/configure.ac b/configure.ac
|
|
|
43df5c |
index af710cf5481c0..9046633ce5a4d 100644
|
|
|
43df5c |
--- a/configure.ac
|
|
|
43df5c |
+++ b/configure.ac
|
|
|
43df5c |
@@ -173,7 +173,8 @@ AC_CONFIG_FILES([Makefile extensions/GNUmakefile include/Makefile
|
|
|
43df5c |
libiptc/Makefile libiptc/libiptc.pc
|
|
|
43df5c |
libiptc/libip4tc.pc libiptc/libip6tc.pc
|
|
|
43df5c |
libxtables/Makefile utils/Makefile
|
|
|
43df5c |
- include/xtables-version.h include/iptables/internal.h])
|
|
|
43df5c |
+ include/xtables-version.h include/iptables/internal.h
|
|
|
43df5c |
+ utils/nfnl_osf.8])
|
|
|
43df5c |
AC_OUTPUT
|
|
|
43df5c |
|
|
|
43df5c |
|
|
|
43df5c |
diff --git a/utils/.gitignore b/utils/.gitignore
|
|
|
43df5c |
index 216d1e4a621ed..7c6afbf4e6a52 100644
|
|
|
43df5c |
--- a/utils/.gitignore
|
|
|
43df5c |
+++ b/utils/.gitignore
|
|
|
43df5c |
@@ -1,2 +1,3 @@
|
|
|
43df5c |
/nfnl_osf
|
|
|
43df5c |
+/nfnl_osf.8
|
|
|
43df5c |
/nfbpf_compile
|
|
|
43df5c |
diff --git a/utils/Makefile.am b/utils/Makefile.am
|
|
|
43df5c |
index c4192a9e73688..80029e303ff3b 100644
|
|
|
43df5c |
--- a/utils/Makefile.am
|
|
|
43df5c |
+++ b/utils/Makefile.am
|
|
|
43df5c |
@@ -6,8 +6,10 @@ AM_CPPFLAGS = ${regular_CPPFLAGS} -I${top_builddir}/include \
|
|
|
43df5c |
|
|
|
43df5c |
sbin_PROGRAMS =
|
|
|
43df5c |
pkgdata_DATA =
|
|
|
43df5c |
+man_MANS =
|
|
|
43df5c |
|
|
|
43df5c |
if HAVE_LIBNFNETLINK
|
|
|
43df5c |
+man_MANS += nfnl_osf.8
|
|
|
43df5c |
sbin_PROGRAMS += nfnl_osf
|
|
|
43df5c |
pkgdata_DATA += pf.os
|
|
|
43df5c |
|
|
|
43df5c |
@@ -23,3 +25,5 @@ if ENABLE_SYNCONF
|
|
|
43df5c |
sbin_PROGRAMS += nfsynproxy
|
|
|
43df5c |
nfsynproxy_LDADD = -lpcap
|
|
|
43df5c |
endif
|
|
|
43df5c |
+
|
|
|
43df5c |
+CLEANFILES = nfnl_osf.8
|
|
|
43df5c |
diff --git a/utils/nfnl_osf.8.in b/utils/nfnl_osf.8.in
|
|
|
43df5c |
new file mode 100644
|
|
|
43df5c |
index 0000000000000..140b5c3f99a42
|
|
|
43df5c |
--- /dev/null
|
|
|
43df5c |
+++ b/utils/nfnl_osf.8.in
|
|
|
43df5c |
@@ -0,0 +1,67 @@
|
|
|
43df5c |
+.TH NFNL_OSF 8 "" "@PACKAGE_STRING@" "@PACKAGE_STRING@"
|
|
|
43df5c |
+
|
|
|
43df5c |
+.SH NAME
|
|
|
43df5c |
+nfnl_osf \- OS fingerprint loader utility
|
|
|
43df5c |
+.SH SYNOPSIS
|
|
|
43df5c |
+
|
|
|
43df5c |
+.ad l
|
|
|
43df5c |
+.in +8
|
|
|
43df5c |
+.ti -8
|
|
|
43df5c |
+.B nfnl_osf
|
|
|
43df5c |
+.BI -f " fingerprints"
|
|
|
43df5c |
+[
|
|
|
43df5c |
+.B -d
|
|
|
43df5c |
+]
|
|
|
43df5c |
+
|
|
|
43df5c |
+.SH DESCRIPTION
|
|
|
43df5c |
+The
|
|
|
43df5c |
+.B nfnl_osf
|
|
|
43df5c |
+utility allows to load a set of operating system signatures into the kernel for
|
|
|
43df5c |
+later matching against using iptables'
|
|
|
43df5c |
+.B osf
|
|
|
43df5c |
+match.
|
|
|
43df5c |
+
|
|
|
43df5c |
+.SH OPTIONS
|
|
|
43df5c |
+
|
|
|
43df5c |
+.TP
|
|
|
43df5c |
+.BI -f " fingerprints"
|
|
|
43df5c |
+Read signatures from file
|
|
|
43df5c |
+.IR fingerprints .
|
|
|
43df5c |
+
|
|
|
43df5c |
+.TP
|
|
|
43df5c |
+.B -d
|
|
|
43df5c |
+Instead of adding the signatures from
|
|
|
43df5c |
+.I fingerprints
|
|
|
43df5c |
+into the kernel, remove them.
|
|
|
43df5c |
+
|
|
|
43df5c |
+.SH EXIT STATUS
|
|
|
43df5c |
+Exit status is 0 if command succeeded, otherwise a negative return code
|
|
|
43df5c |
+indicates the type of error which happened:
|
|
|
43df5c |
+
|
|
|
43df5c |
+.TP
|
|
|
43df5c |
+.B -1
|
|
|
43df5c |
+Illegal arguments passed, fingerprints file not readable or failure in netlink
|
|
|
43df5c |
+communication.
|
|
|
43df5c |
+
|
|
|
43df5c |
+.TP
|
|
|
43df5c |
+.B -ENOENT
|
|
|
43df5c |
+Fingerprints file not specified.
|
|
|
43df5c |
+
|
|
|
43df5c |
+.TP
|
|
|
43df5c |
+.B -EINVAL
|
|
|
43df5c |
+Netlink handle initialization failed or fingerprints file format invalid.
|
|
|
43df5c |
+
|
|
|
43df5c |
+.SH FILES
|
|
|
43df5c |
+
|
|
|
43df5c |
+An up to date set of operating system signatures can be downloaded from
|
|
|
43df5c |
+http://www.openbsd.org/cgi-bin/cvsweb/src/etc/pf.os .
|
|
|
43df5c |
+
|
|
|
43df5c |
+.SH SEE ALSO
|
|
|
43df5c |
+
|
|
|
43df5c |
+The description of
|
|
|
43df5c |
+.B osf
|
|
|
43df5c |
+match in
|
|
|
43df5c |
+.BR iptables-extensions (8)
|
|
|
43df5c |
+contains further information about the topic as well as example
|
|
|
43df5c |
+.B nfnl_osf
|
|
|
43df5c |
+invocations.
|
|
|
43df5c |
--
|
|
|
43df5c |
2.17.0
|
|
|
43df5c |
|