- adapterized (sorted %verify attrs)

[packages/firewall-init.git] / firewall-init.spec

diff --git a/firewall-init.spec b/firewall-init.spec
index dc761338ff9292491eb4205fe4e330611f8dc37f..61e801303a2fad310327d6cc051bcad8ba61f87c 100644 (file)
--- a/firewall-init.spec
+++ b/firewall-init.spec
@@ -1,62 +1,63 @@
 Summary:       Firewall SysV-init style start-up script
 Summary(pl):   Skrypt startowy firewalla
 Name:          firewall-init
-Version:       2.1
-Release:       1@2.2
-License:       BSD
+Version:       2.99.8
+Release:       2
+License:       GPL
 Group:         Networking/Admin
-Group(de):     Netzwerkwesen/Administration
-Group(pl):     Sieciowe/Administracyjne
-Source0:       ftp://ftp.lj.pl/pub/linux/%{name}-%{version}.tar.gz
-Requires:      ipchains
-Conflicts:     kernel >= 2.3.0
-Prereq:                rc-scripts
-Prereq:                /sbin/chkconfig
-Buildarch:     noarch
+Source0:       ftp://ftp.pld-linux.org/software/firewall-init/%{name}-%{version}.tar.bz2
+# Source0-md5: 1237a67be00e5ecef53a934f86c7507b
+Requires(post,preun):  /sbin/chkconfig
+Requires:      iptables >= 1.2.2-2
+Requires:      rc-scripts
+Obsoletes:     iptables-init
+BuildArch:     noarch
 BuildRoot:     %{tmpdir}/%{name}-%{version}-root-%(id -u -n)
 
 %description
-Firewall-init is meant to provide an easy to use interface to start
-and stopping the kernel IP packet filters and accounting through
-ipchains(8).
+Firewall-init is meant to provide an easy to use interface for
+starting and stopping the kernel IP packet filter through iptables(8).
 
 %description -l pl
 Dziêki firewall-init uzyskuje siê ³atwy interfejs do startowania i
-stopowania filtrów IP j±dra oraz zliczania pakietów poprzez
-ipchains(8).
+stopowania filtrów IP j±dra poprzez iptables(8).
 
 %prep
 %setup -q
 
 %install
 rm -rf $RPM_BUILD_ROOT
-install -d $RPM_BUILD_ROOT/etc/{sysconfig/firewall-rules,rc.d/init.d}
 
-install firewall.init $RPM_BUILD_ROOT/etc/rc.d/init.d/firewall
-install firewall $RPM_BUILD_ROOT/etc/sysconfig/
+%{__make} install \
+       DESTDIR=$RPM_BUILD_ROOT
 
-for i in input output forward; do
-       echo '#<policy> <proto> <s_addr/s_mask> <s_port> <d_addr/d_mask> <d_port> <interface> <options>' > \
-               $RPM_BUILD_ROOT/etc/sysconfig/firewall-rules/${i}
-done
+%clean
+rm -rf $RPM_BUILD_ROOT
 
-gzip -9nf README
+#%%pre
+#if [ `rpm -q --queryformat='%{VERSION}' firewall-init` < '2.5' ]; then
+#      echo "You need to manually convert your rules to iptables or install"
+#      echo "firewall-init-ipchains"
+#      exit 1
+#fi
 
 %post
 /sbin/chkconfig --add firewall
+/sbin/chkconfig --add firewall-pre
 
-%postun
+%preun
 if [ "$1" = "0" ]; then
        /sbin/chkconfig --del firewall
+       /sbin/chkconfig --del firewall-pre
 fi
 
-%clean
-rm -rf $RPM_BUILD_ROOT
-
 %files
 %defattr(644,root,root,755)
-%doc README.gz input.example
-%attr(600,root,root) %verify(not size mtime md5) %config(noreplace) /etc/sysconfig/firewall
-%attr(600,root,root) %verify(not size mtime md5) %config(noreplace) /etc/sysconfig/firewall-rules/*
-%attr(700,root,root) %dir /etc/sysconfig/firewall-rules
-%attr(754,root,root) /etc/rc.d/init.d/firewall
+%doc README
+%defattr(640,root,root,750)
+%verify(not md5 mtime size) %config(noreplace) /etc/sysconfig/firewall
+%verify(not md5 mtime size) %config(noreplace) /etc/sysconfig/firewall.d/ip*
+%verify(not md5 mtime size) %config(noreplace) /etc/sysconfig/firewall.d/functions.rules
+/etc/sysconfig/firewall.d/functions
+%attr(754,root,root) /etc/rc.d/init.d/firewall*
+%dir /etc/sysconfig/firewall.d