firehol.spec

   1 # TODO
   2 # - pldize initscript
   3 # - unbash initscript
   4 # - recheck deps
   5 # - update configure not to require tools at build time
   6 Summary:        Simple and powerful firewall and traffic shaping languages
   7 Name:           firehol
   8 Version:        3.0.1
   9 Release:        0.1
  10 License:        GPL v2+
  11 Group:          Applications/Networking
  12 Source0:        https://firehol.org/download/firehol/releases/v%{version}/%{name}-%{version}.tar.xz
  13 # Source0-md5:  afee409b698ad0707340112ff0e811b2
  14 Source1:        %{name}.service
  15 Source2:        fireqos.service
  16 URL:            https://firehol.org/
  17 BuildRequires:  hostname
  18 BuildRequires:  iprange >= 1.0.2
  19 BuildRequires:  tar >= 1:1.22
  20 BuildRequires:  wget
  21 BuildRequires:  xz
  22 Requires(post,preun):   /sbin/chkconfig
  23 Requires:       coreutils
  24 Requires:       gawk >= 3.0
  25 Requires:       grep >= 2.4.2
  26 Requires:       gzip
  27 Requires:       hostname
  28 Requires:       iproute2 >= 2.2.4
  29 Requires:       ipset
  30 Requires:       iptables >= 1.2.4
  31 Requires:       kmod
  32 Requires:       less
  33 Requires:       procps
  34 Requires:       rc-scripts
  35 Requires:       sed
  36 Requires:       uname(release) >= 2.4
  37 Requires:       util-linux >= 2.11
  38 BuildArch:      noarch
  39 BuildRoot:      %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
  40
  41 %define         _libdir %{_prefix}/lib
  42
  43 %description
  44 FireHOL is a generic firewall generator, meaning that you can design
  45 any kind of local or routing stateful packet filtering firewalls with
  46 ease. Install FireHOL if you want an easy way to configure stateful
  47 packet filtering firewalls on Linux hosts and routers.
  48
  49 FireHOL uses an extremely simple but powerful way to define firewall
  50 rules which it turns into complete stateful iptables firewalls.
  51
  52 You can run FireHOL with the 'helpme' argument, to get a configuration
  53 file for the system run, which you can modify according to your needs.
  54 The default configuration file will allow only client traffic on all
  55 interfaces.
  56
  57 %prep
  58 %setup -q
  59
  60 %build
  61 # grep -E 'AX_NEED_PROG|AX_CHECK_PROG' configure.ac |sort -u|sed -rne 's/.+\(\[([^]]+)\], \[([^]]+)\].+/echo \1=`PATH=$PATH:\/usr\/sbin which \2` \\\\/p'|sh
  62 %configure \
  63         FIREHOL_AUTOSAVE=/etc/sysconfig/iptables \
  64         FIREHOL_AUTOSAVE6=/etc/sysconfig/ip6tables \
  65         \
  66         BASH_SHELL_PATH=/bin/bash \
  67         BRIDGE=/sbin/bridge \
  68         CAT=/bin/cat \
  69         CHMOD=/bin/chmod \
  70         CHOWN=/bin/chown \
  71         CP=/bin/cp \
  72         CURL=/usr/bin/curl \
  73         CUT=/usr/bin/cut \
  74         DATE=/bin/date \
  75         DIFF=/usr/bin/diff \
  76         DIRNAME=/usr/bin/dirname \
  77         ENV=/usr/bin/env \
  78         EXPR=/usr/bin/expr \
  79         FIND=/usr/bin/find \
  80         FLOCK=/usr/bin/flock \
  81         FOLD=/usr/bin/fold \
  82         FUNZIP=/usr/bin/funzip \
  83         GAWK=/usr/bin/gawk \
  84         GIT=/usr/bin/git \
  85         HEAD=/usr/bin/head \
  86         HOSTNAMECMD=/bin/hostname \
  87         IP6TABLES=/usr/sbin/ip6tables \
  88         IP6TABLES_RESTORE=/usr/sbin/ip6tables-restore \
  89         IP6TABLES_SAVE=/usr/sbin/ip6tables-save \
  90         IP=/sbin/ip \
  91         IPRANGE=/usr/bin/iprange \
  92         IPSET=/usr/sbin/ipset \
  93         IPTABLES=/usr/sbin/iptables \
  94         IPTABLES_RESTORE=/usr/sbin/iptables-restore \
  95         IPTABLES_SAVE=/usr/sbin/iptables-save \
  96         LN=/bin/ln \
  97         LOGGER=/usr/bin/logger \
  98         LS=/bin/ls \
  99         LSMOD=/sbin/lsmod \
 100         MKDIR=/bin/mkdir \
 101         MKTEMP=/bin/mktemp \
 102         MODPROBE=/sbin/insmod \
 103         MODPROBE=/sbin/modprobe \
 104         MORE=/bin/more \
 105         MV=/bin/mv \
 106         NEATO=/usr/bin/neato \
 107         PING6=/usr/bin/ping6 \
 108         PING=/usr/bin/ping \
 109         RENICE=/usr/bin/renice \
 110         RM=/bin/rm \
 111         RMMOD=/sbin/rmmod \
 112         SCREEN=/usr/bin/screen \
 113         SEQ=/usr/bin/seq \
 114         SH=/bin/sh \
 115         SLEEP=/bin/sleep \
 116         SORT=/bin/sort \
 117         SS=/sbin/ss \
 118         STTY=/bin/stty \
 119         SYSCTL=/sbin/sysctl \
 120         TAIL=/usr/bin/tail \
 121         TAR=/bin/tar \
 122         TC=/sbin/tc \
 123         TCPDUMP=/usr/sbin/tcpdump \
 124         TOUCH=/bin/touch \
 125         TPUT=/usr/bin/tput \
 126         TR=/usr/bin/tr \
 127         TRACEROUTE=/usr/bin/traceroute \
 128         UNAME=/bin/uname \
 129         UNIQ=/usr/bin/uniq \
 130         UNZIP=/usr/bin/unzip \
 131         WC=/usr/bin/wc \
 132         WGET=/usr/bin/wget \
 133         WHOIS=/usr/bin/whois \
 134         ZCAT=/bin/zcat \
 135         %{nil}
 136
 137 %{__make}
 138
 139 %install
 140 rm -rf $RPM_BUILD_ROOT
 141 %{__make} install \
 142         contribdir=%{_examplesdir}/%{name}-%{version}/contrib \
 143         examplesdir=%{_examplesdir}/%{name}-%{version} \
 144         DESTDIR=$RPM_BUILD_ROOT
 145
 146 # Install systemd units.
 147 install -d $RPM_BUILD_ROOT%{systemdunitdir}
 148 cp -p %{SOURCE1} %{SOURCE2} $RPM_BUILD_ROOT%{systemdunitdir}
 149
 150 # Install runtime directories.
 151 install -d $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/services
 152 install -d $RPM_BUILD_ROOT%{_localstatedir}/spool/firehol
 153
 154 # Ghost configurations.
 155 touch $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/firehol.conf \
 156       $RPM_BUILD_ROOT%{_sysconfdir}/%{name}/fireqos.conf
 157
 158 %clean
 159 rm -rf $RPM_BUILD_ROOT
 160
 161 %post
 162 /sbin/chkconfig --add firehol
 163 %service firehol restart
 164 %systemd_post firehol.service
 165 %systemd_post fireqos.service
 166
 167 %preun
 168 if [ "$1" = 0 ]; then
 169         %service firehol stop
 170         /sbin/chkconfig --del firehol
 171 fi
 172 %systemd_preun firehol.service
 173 %systemd_preun fireqos.service
 174
 175 %postun
 176 %systemd_reload
 177
 178 %files
 179 %defattr(644,root,root,755)
 180 %doc README THANKS
 181 %doc doc/firehol/firehol-manual.{pdf,html}
 182 %doc doc/fireqos/fireqos-manual.{pdf,html}
 183 %dir %{_sysconfdir}/firehol
 184 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/firehol.conf
 185 %config(noreplace) %verify(not md5 mtime size) %{_sysconfdir}/%{name}/fireqos.conf
 186 %{_sysconfdir}/%{name}/*.example
 187 %dir %{_sysconfdir}/%{name}/services
 188 %{_sysconfdir}/%{name}/services/*.example
 189 %attr(755,root,root) %{_sbindir}/firehol
 190 %attr(755,root,root) %{_sbindir}/fireqos
 191 %attr(755,root,root) %{_sbindir}/link-balancer
 192 %attr(755,root,root) %{_sbindir}/update-ipsets
 193 %attr(755,root,root) %{_sbindir}/vnetbuild
 194 %dir %{_libdir}/firehol
 195 %{_libdir}/firehol/functions.common.sh
 196 %{_datadir}/update-ipsets
 197 %{_mandir}/man1/firehol.1*
 198 %{_mandir}/man1/fireqos.1*
 199 %{_mandir}/man1/vnetbuild.1*
 200 %{_mandir}/man5/firehol*.5*
 201 %{_mandir}/man5/fireqos*.5*
 202 %{_mandir}/man5/vnetbuild*.5*
 203 %{_examplesdir}/%{name}-%{version}
 204 %{systemdunitdir}/firehol.service
 205 %{systemdunitdir}/fireqos.service
 206 %{_localstatedir}/spool/%{name}