]>
Commit | Line | Data |
---|---|---|
1 | # | |
2 | # Conditional build: | |
3 | %bcond_without dist_kernel # without distribution kernel | |
4 | %bcond_without kernel # don't build kernel modules | |
5 | %bcond_without userspace # don't build userspace tools | |
6 | %bcond_with ipset # include IPSET (6.x) | |
7 | ||
8 | %if %{without kernel} | |
9 | %undefine with_dist_kernel | |
10 | %endif | |
11 | %if "%{_alt_kernel}" != "%{nil}" | |
12 | %undefine with_userspace | |
13 | %endif | |
14 | %if %{without userspace} | |
15 | # nothing to be placed to debuginfo package | |
16 | %define _enable_debug_packages 0 | |
17 | %endif | |
18 | ||
19 | %define rel 2 | |
20 | %define pname xtables-addons | |
21 | Summary: Additional extensions for xtables packet filtering system | |
22 | Summary(pl.UTF-8): Dodatkowe rozszerzenia do systemu filtrowania pakietów xtables | |
23 | Name: %{pname}%{_alt_kernel} | |
24 | Version: 1.42 | |
25 | Release: %{rel} | |
26 | License: GPL v2 | |
27 | Group: Networking/Admin | |
28 | Source0: http://downloads.sourceforge.net/xtables-addons/%{pname}-%{version}.tar.xz | |
29 | # Source0-md5: 7c996a0400667b57ab4fb53a013ae742 | |
30 | URL: http://xtables-addons.sourceforge.net/ | |
31 | BuildRequires: autoconf >= 2.65 | |
32 | BuildRequires: automake >= 1:1.11 | |
33 | BuildRequires: iptables-devel >= 1.4.5 | |
34 | %{?with_dist_kernel:BuildRequires: kernel%{_alt_kernel}-module-build >= 3:2.6.29} | |
35 | BuildRequires: libtool | |
36 | BuildRequires: pkgconfig >= 0.9.0 | |
37 | BuildRequires: rpmbuild(macros) >= 1.379 | |
38 | BuildRequires: tar >= 1.22 | |
39 | BuildRequires: xz | |
40 | Requires: iptables >= 1.4.5 | |
41 | %if %{with ipset} | |
42 | Provides: ipset = 6.7 | |
43 | Obsoletes: ipset | |
44 | %endif | |
45 | Obsoletes: iptables-ipp2p | |
46 | BuildRoot: %{tmpdir}/%{pname}-%{version}-root-%(id -u -n) | |
47 | ||
48 | # use macro, so adapter won't try to wrap | |
49 | %define kpackage kernel%{_alt_kernel}-net-xtables-addons = %{version}-%{rel}@%{_kernel_ver_str} | |
50 | ||
51 | %description | |
52 | xtables-addons is the proclaimed successor to patch-o-matic(-ng). It | |
53 | contains extensions that were not accepted in the main | |
54 | xtables/iptables package. | |
55 | ||
56 | For the tools to work, you should install kernel modules, which could | |
57 | be found in %{kpackage}. | |
58 | ||
59 | %description -l pl.UTF-8 | |
60 | xtables-addons to następca patch-o-matic(-ng). Zawiera rozszerzenia, | |
61 | które nie zostały zaakceptowane do głównego pakietu xtables/iptables. | |
62 | ||
63 | Aby narzędzia działały należy zainstalować moduły jądra, które można | |
64 | znaleźć w pakiecie %{kpackage}. | |
65 | ||
66 | %package -n kernel%{_alt_kernel}-net-xtables-addons | |
67 | Summary: Kernel modules for xtables addons | |
68 | Summary(pl.UTF-8): Moudły jądra dla rozszerzeń z pakietu xtables-addons | |
69 | Release: %{rel}@%{_kernel_ver_str} | |
70 | Group: Base/Kernel | |
71 | # VERSION only dependency is intentional, for allowing multiple kernel pkgs and | |
72 | # single userspace package installs. | |
73 | Requires: %{pname} = %{version} | |
74 | Suggests: xtables-geoip | |
75 | Conflicts: xtables-geoip < 20090901-2 | |
76 | %{?with_dist_kernel:%requires_releq_kernel} | |
77 | Requires(post,postun): /sbin/depmod | |
78 | ||
79 | %description -n kernel%{_alt_kernel}-net-xtables-addons | |
80 | Kernel modules for xtables addons. | |
81 | ||
82 | %description -n kernel%{_alt_kernel}-net-xtables-addons -l pl.UTF-8 | |
83 | Moduły jądra dla rozszerzeń z pakietu xtables-addons. | |
84 | ||
85 | %prep | |
86 | %setup -q | |
87 | ||
88 | %if %{without ipset} | |
89 | %{__sed} -i -e 's#build_ipset6=m#build_ipset6=#' mconfig | |
90 | %endif | |
91 | ||
92 | %build | |
93 | %{__libtoolize} | |
94 | %{__aclocal} | |
95 | %{__autoconf} | |
96 | %{__autoheader} | |
97 | %{__automake} | |
98 | %configure \ | |
99 | --without-kbuild | |
100 | ||
101 | %if %{with kernel} | |
102 | srcdir=${PWD:-$(pwd)} | |
103 | %build_kernel_modules V=1 XA_ABSTOPSRCDIR=$srcdir -C extensions -m compat_xtables | |
104 | %endif | |
105 | ||
106 | %if %{with userspace} | |
107 | %{__make} \ | |
108 | V=1 | |
109 | %endif | |
110 | ||
111 | %install | |
112 | rm -rf $RPM_BUILD_ROOT | |
113 | ||
114 | %if %{with kernel} | |
115 | install -d $RPM_BUILD_ROOT{/etc/modprobe.d,/lib/modules/%{_kernel_ver}/kernel/net/ipv4/netfilter} | |
116 | cd extensions | |
117 | install iptable_rawpost.ko $RPM_BUILD_ROOT/lib/modules/%{_kernel_ver}/kernel/net/ipv4/netfilter | |
118 | %install_kernel_modules -m compat_xtables -d kernel/net/netfilter | |
119 | install -p {ACCOUNT/,pknock/,}xt_*.ko $RPM_BUILD_ROOT/lib/modules/%{_kernel_ver}/kernel/net/netfilter | |
120 | cd .. | |
121 | ||
122 | cat <<'EOF' > $RPM_BUILD_ROOT/etc/modprobe.d/xt_sysrq.conf | |
123 | # Set password at modprobe time. This file is secure if properly guarded, | |
124 | # i.e only readable by root. | |
125 | #options xt_SYSRQ password=cookies | |
126 | ||
127 | # The hash algorithm can also be specified as a module option, for example, to use SHA-256 instead of the default SHA-1: | |
128 | #options xt_SYSRQ hash=sha256 | |
129 | EOF | |
130 | %endif | |
131 | ||
132 | %if %{with userspace} | |
133 | %{__make} -C extensions install \ | |
134 | DESTDIR=$RPM_BUILD_ROOT | |
135 | %{__make} install-man \ | |
136 | DESTDIR=$RPM_BUILD_ROOT | |
137 | ||
138 | %{__rm} $RPM_BUILD_ROOT%{_libdir}/libxt_ACCOUNT_cl.{la,so} | |
139 | %if %{with ipset} | |
140 | %{__rm} $RPM_BUILD_ROOT%{_libdir}/libipset.{la,so} | |
141 | %endif | |
142 | %endif | |
143 | ||
144 | %clean | |
145 | rm -rf $RPM_BUILD_ROOT | |
146 | ||
147 | %post -p /sbin/ldconfig | |
148 | %postun -p /sbin/ldconfig | |
149 | ||
150 | %post -n kernel%{_alt_kernel}-net-xtables-addons | |
151 | %depmod %{_kernel_ver} | |
152 | ||
153 | %postun -n kernel%{_alt_kernel}-net-xtables-addons | |
154 | %depmod %{_kernel_ver} | |
155 | ||
156 | %if %{with userspace} | |
157 | %files | |
158 | %defattr(644,root,root,755) | |
159 | %doc README doc/{README.psd,changelog.txt} | |
160 | %attr(755,root,root) %{_sbindir}/iptaccount | |
161 | %attr(755,root,root) %{_libdir}/libxt_ACCOUNT_cl.so.*.*.* | |
162 | %attr(755,root,root) %ghost %{_libdir}/libxt_ACCOUNT_cl.so.0 | |
163 | %attr(755,root,root) %{_libdir}/xtables/libxt_*.so | |
164 | %{_mandir}/man8/iptaccount.8* | |
165 | %{_mandir}/man8/xtables-addons.8* | |
166 | %if %{with ipset} | |
167 | %attr(755,root,root) %{_sbindir}/ipset | |
168 | %attr(755,root,root) %{_libdir}/libipset.so.*.*.* | |
169 | %attr(755,root,root) %ghost %{_libdir}/libipset.so.1 | |
170 | %{_mandir}/man8/ipset.8* | |
171 | %endif | |
172 | %endif | |
173 | ||
174 | %if %{with kernel} | |
175 | %files -n kernel%{_alt_kernel}-net-xtables-addons | |
176 | %defattr(644,root,root,755) | |
177 | # restricted permissions - may contain password | |
178 | %attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/modprobe.d/xt_sysrq.conf | |
179 | /lib/modules/%{_kernel_ver}/kernel/net/ipv4/netfilter/iptable_rawpost.ko.gz | |
180 | /lib/modules/%{_kernel_ver}/kernel/net/netfilter/compat_xtables.ko.gz | |
181 | /lib/modules/%{_kernel_ver}/kernel/net/netfilter/xt_*.ko.gz | |
182 | %endif |