|
 |
fefa46 |
%define rpmversion 0.8
|
|
|
fefa46 |
%define specrelease 7%{?dist}
|
|
|
fefa46 |
%define libnftnlversion 1.0.8-1
|
|
|
fefa46 |
|
|
|
fefa46 |
Name: nftables
|
|
|
fefa46 |
Version: %{rpmversion}
|
|
|
fefa46 |
Release: %{specrelease}
|
|
|
fefa46 |
Summary: Netfilter Tables userspace utillites
|
|
|
fefa46 |
License: GPLv2
|
|
|
fefa46 |
URL: http://netfilter.org/projects/nftables/
|
|
|
fefa46 |
Source0: http://ftp.netfilter.org/pub/nftables/nftables-%{version}.tar.bz2
|
|
|
fefa46 |
Source1: nftables.service
|
|
|
fefa46 |
Source2: nftables.conf
|
|
|
fefa46 |
Source3: nft.8
|
|
|
fefa46 |
BuildRequires: flex
|
|
|
fefa46 |
BuildRequires: bison
|
|
|
fefa46 |
BuildRequires: libmnl-devel
|
|
|
fefa46 |
BuildRequires: gmp-devel
|
|
|
fefa46 |
BuildRequires: readline-devel
|
|
|
fefa46 |
BuildRequires: libnftnl-devel >= %{libnftnlversion}
|
|
|
fefa46 |
# docbook2X is available in EPEL repo only, which is not included in Brew
|
|
|
fefa46 |
#BuildRequires: docbook2X
|
|
|
fefa46 |
#BuildRequires: docbook-dtds
|
|
|
fefa46 |
BuildRequires: systemd
|
|
|
fefa46 |
Patch0: 0001-src-fix-protocol-context-update-on-big-endian-system.patch
|
|
|
fefa46 |
Patch1: 0002-netlink_linearize-exthdr-op-must-be-u32.patch
|
|
|
fefa46 |
|
|
|
fefa46 |
%description
|
|
|
fefa46 |
Netfilter Tables userspace utilities.
|
|
|
fefa46 |
|
|
|
fefa46 |
%prep
|
|
|
fefa46 |
%autosetup -p1
|
|
|
fefa46 |
|
|
|
fefa46 |
%build
|
|
|
fefa46 |
%configure --disable-silent-rules DOCBOOK2X_MAN="no" DOCBOOK2MAN="no" DB2X_DOCBOOK2MAN="no"
|
|
|
fefa46 |
make %{?_smp_mflags}
|
|
|
fefa46 |
|
|
|
fefa46 |
%install
|
|
|
fefa46 |
%make_install
|
|
|
fefa46 |
find $RPM_BUILD_ROOT -name '*.la' -exec rm -f {} ';'
|
|
|
fefa46 |
mkdir -p $RPM_BUILD_ROOT/%{_mandir}/man8
|
|
|
fefa46 |
cp -a %{SOURCE3} $RPM_BUILD_ROOT/%{_mandir}/man8/
|
|
|
fefa46 |
chmod 644 $RPM_BUILD_ROOT/%{_mandir}/man8/nft*
|
|
|
fefa46 |
|
|
|
fefa46 |
mkdir -p $RPM_BUILD_ROOT/%{_unitdir}
|
|
|
fefa46 |
cp -a %{SOURCE1} $RPM_BUILD_ROOT/%{_unitdir}/
|
|
|
fefa46 |
|
|
|
fefa46 |
mkdir -p $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig
|
|
|
fefa46 |
cp -a %{SOURCE2} $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/
|
|
|
fefa46 |
for f in $RPM_BUILD_ROOT/%{_sysconfdir}/nftables/*; do
|
|
|
fefa46 |
echo "# include \"%{_sysconfdir}/nftables/$(basename $f)\""
|
|
|
fefa46 |
done >> $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/nftables.conf
|
|
|
fefa46 |
chmod 600 $RPM_BUILD_ROOT/%{_sysconfdir}/sysconfig/nftables.conf
|
|
|
fefa46 |
chmod 750 $RPM_BUILD_ROOT/%{_sysconfdir}/nftables/
|
|
|
fefa46 |
chmod 600 $RPM_BUILD_ROOT/%{_sysconfdir}/nftables/*
|
|
|
fefa46 |
|
|
|
fefa46 |
%post
|
|
|
fefa46 |
%systemd_post nftables.service
|
|
|
fefa46 |
|
|
|
fefa46 |
%preun
|
|
|
fefa46 |
%systemd_preun nftables.service
|
|
|
fefa46 |
|
|
|
fefa46 |
%postun
|
|
|
fefa46 |
%systemd_postun_with_restart nftables.service
|
|
|
fefa46 |
|
|
|
fefa46 |
%files
|
|
|
fefa46 |
%doc COPYING TODO
|
|
|
fefa46 |
%config(noreplace) %{_sysconfdir}/nftables/
|
|
|
fefa46 |
%config(noreplace) %{_sysconfdir}/sysconfig/nftables.conf
|
|
|
fefa46 |
%{_sbindir}/nft
|
|
|
fefa46 |
%{_mandir}/man8/nft*
|
|
|
fefa46 |
%{_unitdir}/nftables.service
|
|
|
fefa46 |
|
|
|
fefa46 |
%changelog
|
|
|
fefa46 |
* Mon Dec 18 2017 Phil Sutter <psutter@redhat.com> [0.8-7.el7]
|
|
|
fefa46 |
- A proper fix for incompatible docbook2man (Phil Sutter) [1523239]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Thu Dec 14 2017 Phil Sutter <psutter@redhat.com> [0.8-6.el7]
|
|
|
fefa46 |
- netlink_linearize: exthdr op must be u32 (Phil Sutter) [1524246]
|
|
|
fefa46 |
- src: fix protocol context update on big-endian systems (Phil Sutter) [1523016]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Fri Dec 08 2017 Phil Sutter <psutter@redhat.com> [0.8-5.el7]
|
|
|
fefa46 |
- Prevent build failure due to incompatible docbook2man (Phil Sutter) [1523239]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Sat Oct 14 2017 Phil Sutter <psutter@redhat.com> [0.8-4.el7]
|
|
|
fefa46 |
- Update /etc/sysconfig/nftables.conf with new config samples (Phil Sutter) [1472261]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Fri Oct 13 2017 Phil Sutter <psutter@redhat.com> [0.8-3.el7]
|
|
|
fefa46 |
- Fix typo in spec file (Phil Sutter) [1451404]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Fri Oct 13 2017 Phil Sutter <psutter@redhat.com> [0.8-2.el7]
|
|
|
fefa46 |
- Fix permissions of installed config files (Phil Sutter) [1451404]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Fri Oct 13 2017 Phil Sutter <psutter@redhat.com> [0.8-1.el7]
|
|
|
fefa46 |
- Rebase onto upstream version 0.8 (Phil Sutter) [1472261]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Fri May 12 2017 Phil Sutter <psutter@redhat.com> [0.6-4.el7]
|
|
|
fefa46 |
- evaluate: Avoid undefined behaviour in concat_subtype_id() (Phil Sutter) [1360789]
|
|
|
fefa46 |
- src: Interpret OP_NEQ against a set as OP_LOOKUP (Phil Sutter) [1440011]
|
|
|
fefa46 |
- include: refresh uapi/linux/netfilter/nf_tables.h copy (Phil Sutter) [1440011]
|
|
|
fefa46 |
- datatype: time_type should send milliseconds to userspace (Phil Sutter) [1427114]
|
|
|
fefa46 |
- meta: fix memory leak in tc classid parser (Phil Sutter) [1380326]
|
|
|
fefa46 |
- src: meta priority support using tc classid (Phil Sutter) [1380326]
|
|
|
fefa46 |
- src: simplify classid printing using x instead of 04x (Phil Sutter) [1380326]
|
|
|
fefa46 |
- src: rename datatype name from tc_handle to classid (Phil Sutter) [1380326]
|
|
|
fefa46 |
- payload: don't update protocol context if we can't find a description (Timothy Redaelli) [1446534 1399764]
|
|
|
fefa46 |
- evaluate: reject: Have a generic fix for missing network context (Timothy Redaelli) [1360354]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Mon Mar 06 2017 Phil Sutter <psutter@redhat.com> [0.6-3.el7]
|
|
|
fefa46 |
- nftables.spec: Require at least libnftnl-1.0.6-4 (Phil Sutter) [1358705]
|
|
|
fefa46 |
- evaluate: Fix datalen checks in expr_evaluate_string() (Phil Sutter) [1360240]
|
|
|
fefa46 |
- netlink_delinearize: Avoid potential null pointer deref (Timothy Redaelli) [1360257]
|
|
|
fefa46 |
- src: use new range expression for != [a,b] intervals (Phil Sutter) [1358705]
|
|
|
fefa46 |
|
|
|
fefa46 |
* Tue Jul 19 2016 Phil Sutter <psutter@redhat.com> 0.6-2
|
|
|
fefa46 |
- Add pre-generated nft.8 to overcome missing docbook2X package.
|
|
|
fefa46 |
|
|
|
fefa46 |
* Wed Jun 29 2016 Phil Sutter <psutter@redhat.com> 0.6-1
|
|
|
fefa46 |
- Rebased from Fedora Rawhide and adjusted for RHEL review.
|