Blame SPECS/nftables.spec

34625f
Name:           nftables
34625f
Version:        0.9.0
34625f
Release:        8%{?dist}
34625f
# Upstream released a 0.100 version, then 0.4. Need Epoch to get back on track.
34625f
Epoch:          1
34625f
Summary:        Netfilter Tables userspace utillites
34625f
34625f
License:        GPLv2
34625f
URL:            http://netfilter.org/projects/nftables/
34625f
Source0:        http://ftp.netfilter.org/pub/nftables/nftables-%{version}.tar.bz2
34625f
Source1:        nftables.service
34625f
Source2:        nftables.conf
34625f
34625f
Patch1:  0001-evaluate-reject-Allow-icmpx-in-inet-bridge-families.patch
34625f
Patch2:  0002-monitor-Drop-fake-XML-support.patch
34625f
Patch3:  0003-monitor-Drop-update-table-and-update-chain-cases.patch
34625f
Patch4:  0004-monitor-Fix-printing-of-ct-objects.patch
34625f
Patch5:  0005-monitor-Use-libnftables-JSON-output.patch
34625f
Patch6:  0006-tests-monitor-Test-JSON-output-as-well.patch
34625f
Patch7:  0007-segtree-bogus-range-via-get-set-element-on-existing-.patch
34625f
Patch8:  0008-segtree-disantangle-get_set_interval_end.patch
34625f
Patch9:  0009-segtree-memleak-in-get_set_decompose.patch
34625f
Patch10: 0010-segtree-stop-iteration-on-existing-elements-in-case-.patch
34625f
Patch11: 0011-segtree-incorrect-handling-of-last-element-in-get_se.patch
34625f
Patch12: 0012-segtree-set-proper-error-cause-on-existing-elements.patch
34625f
Patch13: 0013-rule-fix-memleak-in-do_get_setelems.patch
34625f
Patch14: 0014-Fix-memleak-in-netlink_parse_fwd-error-path.patch
34625f
Patch15: 0015-libnftables-Fix-memleak-in-nft_parse_bison_filename.patch
34625f
Patch16: 0016-src-pass-struct-nft_ctx-through-struct-eval_ctx.patch
34625f
Patch17: 0017-src-trace-fix-policy-printing.patch
34625f
Patch18: 0018-rule-list-only-the-table-containing-object.patch
34625f
Patch19: 0019-src-pass-struct-nft_ctx-through-struct-netlink_ctx.patch
34625f
Patch20: 0020-netlink-reset-mnl_socket-field-in-struct-nft_ctx-on-.patch
34625f
Patch21: 0021-src-remove-opts-field-from-struct-xt_stmt.patch
34625f
Patch22: 0022-JSON-Support-latest-enhancements-of-fwd-statement.patch
34625f
Patch23: 0023-parser_json-Fix-for-ineffective-family-value-checks.patch
34625f
Patch24: 0024-json-Fix-memleak-in-dup_stmt_json.patch
34625f
Patch25: 0025-json-Fix-for-recent-changes-to-context-structs.patch
34625f
Patch26: 0026-parser_bison-Fix-for-ECN-keyword-in-LHS-of-relationa.patch
34625f
Patch27: 0027-nft.8-Update-meta-pkt_type-value-description.patch
34625f
Patch28: 0028-json-Work-around-segfault-when-encountering-xt-stmt.patch
34625f
Patch29: 0029-nft.8-Document-log-level-audit.patch
34625f
Patch30: 0030-nft.8-Clarify-index-option-of-add-rule-command.patch
34625f
Patch31: 0031-src-Reject-export-vm-json-command.patch
34625f
34625f
34625f
#BuildRequires: autogen
34625f
#BuildRequires: autoconf
34625f
#BuildRequires: automake
34625f
#BuildRequires: libtool
34625f
BuildRequires:  gcc
34625f
BuildRequires: flex
34625f
BuildRequires: bison
34625f
BuildRequires: libmnl-devel
34625f
BuildRequires: gmp-devel
34625f
BuildRequires: readline-devel
34625f
BuildRequires: libnftnl-devel
34625f
BuildRequires: docbook2X
34625f
BuildRequires: systemd
34625f
BuildRequires: jansson-devel
34625f
BuildRequires: iptables-devel
34625f
34625f
%description
34625f
Netfilter Tables userspace utilities.
34625f
34625f
%package        devel
34625f
Summary:        Development library for nftables / libnftables
34625f
Group:          Development/Libraries
34625f
Requires:       %{name} = %{epoch}:%{version}-%{release}
34625f
Requires:       pkgconfig
34625f
34625f
%description devel
34625f
Development tools and static libraries and header files for the libnftables library.
34625f
34625f
%prep
34625f
%autosetup -p1
34625f
34625f
%build
34625f
#./autogen.sh
34625f
%configure --disable-silent-rules --with-json --with-xtables
34625f
make %{?_smp_mflags}
34625f
34625f
%install
34625f
%make_install
34625f
find $RPM_BUILD_ROOT -name '*.la' -exec rm -f {} ';'
34625f
34625f
# Don't ship static lib (for now at least)
34625f
rm -f $RPM_BUILD_ROOT/%{_libdir}/libnftables.a
34625f
34625f
chmod 644 $RPM_BUILD_ROOT/%{_mandir}/man8/nft*
34625f
34625f
mkdir -p $RPM_BUILD_ROOT/%{_unitdir}
34625f
cp -a %{SOURCE1} $RPM_BUILD_ROOT/%{_unitdir}/
34625f
34625f
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig
34625f
cp -a %{SOURCE2} $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/
34625f
34625f
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/nftables
34625f
34625f
%post
34625f
%systemd_post nftables.service
34625f
34625f
%preun
34625f
%systemd_preun nftables.service
34625f
34625f
%postun
34625f
%systemd_postun_with_restart nftables.service
34625f
34625f
%post devel
34625f
%ldconfig_post
34625f
34625f
%postun devel
34625f
%ldconfig_postun
34625f
34625f
%files
34625f
%license COPYING
34625f
%config(noreplace) %{_sysconfdir}/nftables/
34625f
%config(noreplace) %{_sysconfdir}/sysconfig/nftables.conf
34625f
%{_sbindir}/nft
34625f
%{_libdir}/libnftables.so.*
34625f
%{_mandir}/man8/nft*
34625f
%{_unitdir}/nftables.service
34625f
34625f
%files devel
34625f
%{_libdir}/libnftables.so
34625f
%{_libdir}/pkgconfig/libnftables.pc
34625f
%{_includedir}/nftables/libnftables.h
34625f
34625f
%changelog
34625f
* Fri Mar 01 2019 Phil Sutter - 1:0.9.0-8
34625f
- Add missing patch to spec file
34625f
34625f
* Fri Dec 21 2018 Phil Sutter - 1:0.9.0-7
34625f
- src: Reject 'export vm json' command
34625f
34625f
* Tue Dec 18 2018 Phil Sutter - 1:0.9.0-6
34625f
- Rebuild for updated libnftnl
34625f
34625f
* Thu Dec 13 2018 Phil Sutter - 1:0.9.0-5
34625f
- nft.8: Document log level audit
34625f
- nft.8: Clarify 'index' option of add rule command
34625f
34625f
* Thu Oct 25 2018 Phil Sutter - 1:0.9.0-4
34625f
- Add fixes for covscan report
34625f
- Fix for ECN keyword in LHS of relational
34625f
- Update meta pkt_type value description
34625f
- Fix for segfault with JSON output if xt expression is present
34625f
- Add missing nft suffix to files included from /etc/sysconfig/nftables.conf
34625f
- Use native JSON API in nft monitor
34625f
34625f
* Thu Oct 11 2018 Phil Sutter - 1:0.9.0-3
34625f
- Enable xtables support
34625f
- Enable JSON support
34625f
34625f
* Mon Sep 10 2018 Phil Sutter - 1:0.9.0-2
34625f
- Allow icmpx in inet/bridge families
34625f
34625f
* Tue Aug 14 2018 Phil Sutter - 1:0.9.0-1
34625f
- New version 0.9.0
34625f
- Install libnftables
34625f
- Add devel sub-package
34625f
- Add gcc BuildRequires
34625f
34625f
* Sat Mar 03 2018 Kevin Fenzi <kevin@scrye.com> - 0.8.3-1
34625f
- Update to 0.8.3. Fixes bug #1551207
34625f
34625f
* Thu Feb 08 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.8.2-2
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
34625f
34625f
* Mon Feb 05 2018 Kevin Fenzi <kevin@scrye.com> - 0.8.2-1
34625f
- Update to 0.8.2. Fixes bug #1541582
34625f
34625f
* Tue Jan 16 2018 Kevin Fenzi <kevin@scrye.com> - 0.8.1-1
34625f
- Update to 0.8.1. Fixes bug #1534982
34625f
34625f
* Sun Oct 22 2017 Kevin Fenzi <kevin@scrye.com> - 0.8-1
34625f
- Update to 0.8. 
34625f
34625f
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.7-5
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
34625f
34625f
* Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.7-4
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
34625f
34625f
* Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.7-3
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
34625f
34625f
* Thu Jan 12 2017 Igor Gnatenko <ignatenko@redhat.com> - 1:0.7-2
34625f
- Rebuild for readline 7.x
34625f
34625f
* Thu Dec 22 2016 Kevin Fenzi <kevin@scrye.com> - 0.7-1
34625f
- Update to 0.7
34625f
34625f
* Fri Jul 15 2016 Kevin Fenzi <kevin@scrye.com> - 0.6-2
34625f
- Rebuild for new glibc symbols
34625f
34625f
* Thu Jun 02 2016 Kevin Fenzi <kevin@scrye.com> - 0.6-1
34625f
- Update to 0.6.
34625f
34625f
* Sun Apr 10 2016 Kevin Fenzi <kevin@scrye.com> - 0.5-4
34625f
- Add example config files and move config to /etc/sysconfig. Fixes bug #1313936
34625f
34625f
* Fri Mar 25 2016 Kevin Fenzi <kevin@scrye.com> - 0.5-3
34625f
- Add systemd unit file. Fixes bug #1313936
34625f
34625f
* Thu Feb 04 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1:0.5-2
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
34625f
34625f
* Thu Sep 17 2015 Kevin Fenzi <kevin@scrye.com> 0.5-1
34625f
- Update to 0.5
34625f
34625f
* Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1:0.4-3
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
34625f
34625f
* Sat Jan 10 2015 Kevin Fenzi <kevin@scrye.com> 0.4-2
34625f
- Add patch to fix nft -f dep gen.
34625f
34625f
* Fri Dec 26 2014 Kevin Fenzi <kevin@scrye.com> 0.4-1
34625f
- Update to 0.4
34625f
- Add Epoch to fix versioning. 
34625f
34625f
* Wed Sep 03 2014 Kevin Fenzi <kevin@scrye.com> 0.100-4.20140903git
34625f
- Update to 20140903 snapshot
34625f
34625f
* Sun Aug 17 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.100-4.20140704git
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
34625f
34625f
* Fri Jul 04 2014 Kevin Fenzi <kevin@scrye.com> 0.100-3.20140704git
34625f
- Update to new snapshot
34625f
34625f
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.100-2.20140426git
34625f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
34625f
34625f
* Sat Apr 26 2014 Kevin Fenzi <kevin@scrye.com> 0.100-1.20140426git
34625f
- Update t0 20140426
34625f
34625f
* Sun Mar 30 2014 Kevin Fenzi <kevin@scrye.com> 0.100-1.20140330git
34625f
- Update to 20140330 snapshot
34625f
- Sync versions to be post 0.100 release.
34625f
34625f
* Wed Mar 26 2014 Kevin Fenzi <kevin@scrye.com> 0-0.7.20140326git
34625f
- Update to 20140326 snapshot
34625f
- Fix permissions on man pages. 
34625f
34625f
* Mon Mar 24 2014 Kevin Fenzi <kevin@scrye.com> 0-0.6.20140324git
34625f
- Update to 20140324 snapshot
34625f
34625f
* Fri Mar 07 2014 Kevin Fenzi <kevin@scrye.com> 0-0.5.20140307git
34625f
- Update to 20140307
34625f
34625f
* Sat Jan 25 2014 Kevin Fenzi <kevin@scrye.com> 0-0.4.20140125git
34625f
- Update to 20140125 snapshot
34625f
34625f
* Sat Jan 18 2014 Kevin Fenzi <kevin@scrye.com> 0-0.3.20140118git
34625f
- Update to 20140118 snapshot
34625f
- Fixed License tag to be correct
34625f
- Fixed changelog
34625f
- nft scripts now use full path for nft
34625f
- Fixed man page building
34625f
- Dropped unneeded rm in install
34625f
- Patched build to not be silent. 
34625f
34625f
* Tue Dec 03 2013 Kevin Fenzi <kevin@scrye.com> 0-0.2.20131202git
34625f
- Use upstream snapshots for source.
34625f
- Use 0 for version. 
34625f
34625f
* Sat Nov 30 2013 Kevin Fenzi <kevin@scrye.com> 0-0.1
34625f
- initial version for Fedora review