firehol.spec

   1 # TODO
   2 # - pldize initscript
   3 # - unbash initscript
   4 # - recheck deps
   5 # - update configure not to require tools at build time
   6 Summary:        Simple and powerful firewall and traffic shaping languages
   7 Name:           firehol
   8 Version:        3.0.1
   9 Release:        0.1
  10 License:        GPL v2+
  11 Group:          Applications/Networking
  12 Source0:        https://firehol.org/download/firehol/releases/v%{version}/%{name}-%{version}.tar.xz
  13 # Source0-md5:  afee409b698ad0707340112ff0e811b2
  14 Source1:        %{name}.service
  15 Source2:        fireqos.service
  16 URL:            https://firehol.org/
  17 BuildRequires:  hostname
  18 BuildRequires:  iprange >= 1.0.2
  19 BuildRequires:  tar >= 1:1.22
  20 BuildRequires:  wget
  21 BuildRequires:  xz
  22 Requires(post,preun):   /sbin/chkconfig
  23 Requires:       coreutils
  24 Requires:       gawk >= 3.0
  25 Requires:       grep >= 2.4.2
  26 Requires:       gzip
  27 Requires:       hostname
  28 Requires:       iproute2 >= 2.2.4
  29 Requires:       ipset
  30 Requires:       iptables >= 1.2.4
  31 Requires:       kmod
  32 Requires:       less
  33 Requires:       procps
  34 Requires:       rc-scripts
  35 Requires:       sed
  36 Requires:       uname(release) >= 2.4
  37 Requires:       util-linux >= 2.11
  38 BuildArch:      noarch
  39 BuildRoot:      %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
  40
  41 %description
  42 FireHOL is a generic firewall generator, meaning that you can design
  43 any kind of local or routing stateful packet filtering firewalls with
  44 ease. Install FireHOL if you want an easy way to configure stateful
  45 packet filtering firewalls on Linux hosts and routers.
  46
  47 FireHOL uses an extremely simple but powerful way to define firewall
  48 rules which it turns into complete stateful iptables firewalls.
  49
  50 You can run FireHOL with the 'helpme' argument, to get a configuration
  51 file for the system run, which you can modify according to your needs.
  52 The default configuration file will allow only client traffic on all
  53 interfaces.
  54
  55 %prep
  56 %setup -q
  57
  58 %build
  59 # grep -E 'AX_NEED_PROG|AX_CHECK_PROG' configure.ac |sort -u|sed -rne 's/.+\(\[([^]]+)\], \[([^]]+)\].+/echo \1=`PATH=$PATH:\/usr\/sbin which \2` \\\\/p'|sh
  60 %configure \
  61         FIREHOL_AUTOSAVE=/etc/sysconfig/iptables \
  62         FIREHOL_AUTOSAVE6=/etc/sysconfig/ip6tables \
  63         \
  64         BASH_SHELL_PATH=/bin/bash \
  65         BRIDGE=/sbin/bridge \
  66         CAT=/bin/cat \
  67         CHMOD=/bin/chmod \
  68         CHOWN=/bin/chown \
  69         CP=/bin/cp \
  70         CURL=/usr/bin/curl \
  71         CUT=/usr/bin/cut \
  72         DATE=/bin/date \
  73         DIFF=/usr/bin/diff \
  74         DIRNAME=/usr/bin/dirname \
  75         ENV=/usr/bin/env \
  76         EXPR=/usr/bin/expr \
  77         FIND=/usr/bin/find \
  78         FLOCK=/usr/bin/flock \
  79         FOLD=/usr/bin/fold \
  80         FUNZIP=/usr/bin/funzip \
  81         GAWK=/usr/bin/gawk \
  82         GIT=/usr/bin/git \
  83         HEAD=/usr/bin/head \
  84         HOSTNAMECMD=/bin/hostname \
  85         IP6TABLES=/usr/sbin/ip6tables \
  86         IP6TABLES_RESTORE=/usr/sbin/ip6tables-restore \
  87         IP6TABLES_SAVE=/usr/sbin/ip6tables-save \
  88         IP=/sbin/ip \
  89         IPRANGE=/usr/bin/iprange \
  90         IPSET=/usr/sbin/ipset \
  91         IPTABLES=/usr/sbin/iptables \
  92         IPTABLES_RESTORE=/usr/sbin/iptables-restore \
  93         IPTABLES_SAVE=/usr/sbin/iptables-save \
  94         LN=/bin/ln \
  95         LOGGER=/usr/bin/logger \
  96         LS=/bin/ls \
  97         LSMOD=/sbin/lsmod \
  98         MKDIR=/bin/mkdir \
  99         MKTEMP=/bin/mktemp \
 100         MODPROBE=/sbin/insmod \
 101         MODPROBE=/sbin/modprobe \
 102         MORE=/bin/more \
 103         MV=/bin/mv \
 104         NEATO=/usr/bin/neato \
 105         PING6=/usr/bin/ping6 \
 106         PING=/usr/bin/ping \
 107         RENICE=/usr/bin/renice \
 108         RM=/bin/rm \
 109         RMMOD=/sbin/rmmod \
 110         SCREEN=/usr/bin/screen \
 111         SEQ=/usr/bin/seq \
 112         SH=/bin/sh \
 113         SLEEP=/bin/sleep \
 114         SORT=/bin/sort \
 115         SS=/sbin/ss \
 116         STTY=/bin/stty \
 117         SYSCTL=/sbin/sysctl \
 118         TAIL=/usr/bin/tail \
 119         TAR=/bin/tar \
 120         TC=/sbin/tc \
 121         TCPDUMP=/usr/sbin/tcpdump \
 122         TOUCH=/bin/touch \
 123         TPUT=/usr/bin/tput \
 124         TR=/usr/bin/tr \
 125         TRACEROUTE=/usr/bin/traceroute \
 126         UNAME=/bin/uname \
 127         UNIQ=/usr/bin/uniq \
 128         UNZIP=/usr/bin/unzip \
 129         WC=/usr/bin/wc \
 130         WGET=/usr/bin/wget \
 131         WHOIS=/usr/bin/whois \
 132         ZCAT=/bin/zcat \
 133         %{nil}
 134
 135 %{__make}
 136
 137 %install
 138 rm -rf $RPM_BUILD_ROOT
 139 %{__make} install \
 140         DESTDIR=$RPM_BUILD_ROOT
 141
 142 # Hack for documentation without crufts.
 143 rm -frv $RPM_BUILD_ROOT%{_docdir}
 144 find examples/ -name "Makefile*" -delete -print
 145
 146 # Install systemd units.
 147 install -d $RPM_BUILD_ROOT%{systemdunitdir}
 148 cp -p %{SOURCE1} %{SOURCE2} $RPM_BUILD_ROOT%{systemdunitdir}
 149
 150 # Install runtime directories.
 151 install -d $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/services
 152 install -d $RPM_BUILD_ROOT%{_localstatedir}/spool/firehol
 153
 154 # Ghost configurations.
 155 touch $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/firehol.conf \
 156       $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/fireqos.conf
 157
 158 %clean
 159 rm -rf $RPM_BUILD_ROOT
 160
 161 %post
 162 /sbin/chkconfig --add firehol
 163 %service firehol restart
 164 %systemd_post firehol.service
 165 %systemd_post fireqos.service
 166
 167 %preun
 168 if [ "$1" = 0 ]; then
 169         %service firehol stop
 170         /sbin/chkconfig --del firehol
 171 fi
 172 %systemd_preun firehol.service
 173 %systemd_preun fireqos.service
 174
 175 %postun
 176 %systemd_reload
 177
 178 %files
 179 %defattr(644,root,root,755)
 180 %doc README THANKS examples
 181 %doc doc/firehol/firehol-manual.{pdf,html}
 182 %doc doc/fireqos/fireqos-manual.{pdf,html}
 183 %dir %{_sysconfdir}/firehol
 184 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/firehol.conf
 185 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/fireqos.conf
 186 %{_sysconfdir}/%{name}/*.example
 187 %dir %{_sysconfdir}/%{name}/services
 188 %{_sysconfdir}/%{name}/services/*.example
 189 %attr(755,root,root) %{_sbindir}/firehol
 190 %attr(755,root,root) %{_sbindir}/fireqos
 191 %attr(755,root,root) %{_sbindir}/link-balancer
 192 %attr(755,root,root) %{_sbindir}/update-ipsets
 193 %attr(755,root,root) %{_sbindir}/vnetbuild
 194 %dir %{_libdir}/firehol
 195 %{_libdir}/firehol/functions.common.sh
 196 %{_datadir}/update-ipsets
 197 %{_mandir}/man1/*.1*
 198 %{_mandir}/man5/*.5*
 199 %{systemdunitdir}/firehol.service
 200 %{systemdunitdir}/fireqos.service
 201 %{_localstatedir}/spool/%{name}