X-Git-Url: http://git.pld-linux.org/?p=packages%2Fxtables-addons.git;a=blobdiff_plain;f=xtables-addons.spec;h=686f7493926c576a137dc9a72a55429fd0dcf49b;hp=0b2c15b1967d3a5cfc2e383a602178cdbc9ed887;hb=834d600ff45f774ed0d3da675b74c34cdbceef25;hpb=2fec774c98cd175f31ce53db55601db41b60b2ad diff --git a/xtables-addons.spec b/xtables-addons.spec index 0b2c15b..686f749 100644 --- a/xtables-addons.spec +++ b/xtables-addons.spec @@ -1,11 +1,8 @@ -# TODO -# - descriptions # # Conditional build: %bcond_without dist_kernel # without distribution kernel %bcond_without kernel # don't build kernel modules %bcond_without userspace # # don't build userspace tools -%bcond_with verbose # verbose build (V=1) %if %{without kernel} %undefine with_dist_kernel @@ -18,64 +15,51 @@ %define _enable_debug_packages 0 %endif -%define rel 6 -Summary: Extensible packet filtering system && extensible NAT system -Summary(pl.UTF-8): System filtrowania pakietów oraz system translacji adresów (NAT) -Summary(pt_BR.UTF-8): Ferramenta para controlar a filtragem de pacotes no kernel-2.6.x -Summary(ru.UTF-8): Утилиты для управления пакетными фильтрами ядра Linux -Summary(uk.UTF-8): Утиліти для керування пакетними фільтрами ядра Linux -Summary(zh_CN.UTF-8): Linux内核包过滤管理工具 +%define rel 13 +Summary: Additional extensions for xtables packet filtering system +Summary(pl.UTF-8): Dodatkowe rozszerzenia do systemu filtrowania pakietów xtables Name: xtables-addons -Version: 1.28 +Version: 1.35 Release: %{rel} -License: GPL +License: GPL v2 Group: Networking/Admin Source0: http://downloads.sourceforge.net/xtables-addons/%{name}-%{version}.tar.xz -# Source0-md5: b94fe23370a1294b985e9a06a0f9d129 -URL: http://xtables-addons.sourceforge.net/ +# Source0-md5: c2d8c972182945c5535c90e33992250c Patch0: kernelrelease.patch -BuildRequires: autoconf -BuildRequires: automake +URL: http://xtables-addons.sourceforge.net/ +BuildRequires: autoconf >= 2.50 +BuildRequires: automake >= 1:1.10.2 BuildRequires: iptables-devel >= 1.4.3 %{?with_dist_kernel:BuildRequires: kernel%{_alt_kernel}-module-build >= 3:2.6.25} BuildRequires: libtool -BuildRequires: pkgconfig +BuildRequires: pkgconfig >= 0.9.0 BuildRequires: rpmbuild(macros) >= 1.379 +BuildRequires: tar >= 1.22 +BuildRequires: xz Requires: iptables >= 1.4.3 BuildRoot: %{tmpdir}/%{name}-%{version}-root-%(id -u -n) # use macro, so adapter won't try to wrap -%define kpackage kernel%{_alt_kernel}-net-xtables-addons = %{rel}@%{_kernel_ver_str} +%define kpackage kernel%{_alt_kernel}-net-xtables-addons = %{version}-%{rel}@%{_kernel_ver_str} %description -An extensible NAT system, and an extensible packet filtering system. -Replacement of ipchains in 2.6 and higher kernels. +xtables-addons is the proclaimed successor to patch-o-matic(-ng). It +contains extensions that were not accepted in the main +xtables/iptables package. -You need %{kpackage} installed for the tools to work. +For the tools to work, you should install kernel modules, which could +be found in %{kpackage}. %description -l pl.UTF-8 -Wydajny system translacji adresów (NAT) oraz system filtrowania -pakietów. Zamiennik ipchains w jądrach 2.6 i nowszych. - -%description -l pt_BR.UTF-8 -Esta é a ferramenta que controla o código de filtragem de pacotes do -kernel 2.6, obsoletando ipchains. Com esta ferramenta você pode -configurar filtros de pacotes, NAT, mascaramento (masquerading), -regras dinâmicas (stateful inspection), etc. +xtables-addons to następca patch-o-matic(-ng). Zawiera rozszerzenia, +które nie zostały zaakceptowane do głównego pakietu xtables/iptables. -%description -l ru.UTF-8 -xtables-addons управляют кодом фильтрации сетевых пакетов в ядре -Linux. Они позволяют вам устанавливать межсетевые экраны (firewalls) и -IP маскарадинг, и т.п. - -%description -l uk.UTF-8 -xtables-addons управляють кодом фільтрації пакетів мережі в ядрі -Linux. Вони дозволяють вам встановлювати міжмережеві екрани -(firewalls) та IP маскарадинг, тощо. +Aby narzędzia działały należy zainstalować moduły jądra, które można +znaleźć w pakiecie %{kpackage}. %package -n kernel%{_alt_kernel}-net-xtables-addons Summary: Kernel modules for xtables addons -Summary(pl.UTF-8): Moudły jądra dla xtables addons +Summary(pl.UTF-8): Moudły jądra dla rozszerzeń z pakietu xtables-addons Release: %{rel}@%{_kernel_ver_str} Group: Base/Kernel # VERSION only dependency is intentional, for allowing multiple kernel pkgs and @@ -90,21 +74,22 @@ Requires(post,postun): /sbin/depmod Kernel modules for xtables addons. %description -n kernel%{_alt_kernel}-net-xtables-addons -l pl.UTF-8 -Moduły jądra dla xtables addons. +Moduły jądra dla rozszerzeń z pakietu xtables-addons. %prep %setup -q %patch0 -p1 -%{__sed} -i -e 's#build_ipset=m#build_ipset=n#' mconfig +%{__sed} -i -e 's#build_ipset4=m#build_ipset4=#' mconfig %build %{__libtoolize} %{__aclocal} %{__autoconf} +%{__autoheader} %{__automake} %configure \ - --with-kbuild=no + --without-kbuild %if %{with kernel} srcdir=${PWD:-$(pwd)} @@ -112,45 +97,45 @@ srcdir=${PWD:-$(pwd)} %endif %if %{with userspace} -%{__make} +%{__make} \ + V=1 %endif %install rm -rf $RPM_BUILD_ROOT -install -d $RPM_BUILD_ROOT{/etc/rc.d/init.d,/lib/modules/%{_kernel_ver}/kernel/net/ipv4/netfilter,%{_mandir}/man8} %if %{with kernel} +install -d $RPM_BUILD_ROOT{/etc/modprobe.d,/lib/modules/%{_kernel_ver}/kernel/net/ipv4/netfilter} cd extensions +install iptable_rawpost.ko $RPM_BUILD_ROOT/lib/modules/%{_kernel_ver}/kernel/net/ipv4/netfilter %install_kernel_modules -m compat_xtables -d kernel/net/netfilter -install -p xt_*ko $RPM_BUILD_ROOT/lib/modules/%{_kernel_ver}/kernel/net/netfilter +install -p {ACCOUNT/,pknock/,}xt_*.ko $RPM_BUILD_ROOT/lib/modules/%{_kernel_ver}/kernel/net/netfilter cd .. -%endif -%if %{with userspace} -%{__make} -C extensions install \ - DESTDIR=$RPM_BUILD_ROOT - -rm -f $RPM_BUILD_ROOT%{_libdir}/libxt_ACCOUNT_cl.{la,so} - -install -d $RPM_BUILD_ROOT%{_mandir}/man8 -cp -a xtables-addons.8 $RPM_BUILD_ROOT%{_mandir}/man8 - -install -d $RPM_BUILD_ROOT/etc/modprobe.d cat <<'EOF' > $RPM_BUILD_ROOT/etc/modprobe.d/xt_sysrq.conf -# Set password at modprobe time. if this file is secure if properly guarded, +# Set password at modprobe time. This file is secure if properly guarded, # i.e only readable by root. #options xt_SYSRQ password=cookies # The hash algorithm can also be specified as a module option, for example, to use SHA-256 instead of the default SHA-1: #options xt_SYSRQ hash=sha256 EOF +%endif + +%if %{with userspace} +%{__make} -C extensions install \ + DESTDIR=$RPM_BUILD_ROOT + +%{__rm} $RPM_BUILD_ROOT%{_libdir}/libxt_ACCOUNT_cl.{la,so} +install -d $RPM_BUILD_ROOT%{_mandir}/man8 +cp -a xtables-addons.8 $RPM_BUILD_ROOT%{_mandir}/man8 %endif %clean rm -rf $RPM_BUILD_ROOT -%post -p /sbin/ldconfig +%post -p /sbin/ldconfig %postun -p /sbin/ldconfig %post -n kernel%{_alt_kernel}-net-xtables-addons @@ -162,16 +147,20 @@ rm -rf $RPM_BUILD_ROOT %if %{with userspace} %files %defattr(644,root,root,755) +%doc README doc/{README.psd,changelog.txt} %attr(755,root,root) %{_sbindir}/iptaccount +%attr(755,root,root) %{_libdir}/libxt_ACCOUNT_cl.so.*.*.* +%attr(755,root,root) %ghost %{_libdir}/libxt_ACCOUNT_cl.so.0 %attr(755,root,root) %{_libdir}/xtables/libxt_*.so -%attr(755,root,root) %{_libdir}/libxt_ACCOUNT_cl.so.* %{_mandir}/man8/xtables-addons.8* %endif %if %{with kernel} %files -n kernel%{_alt_kernel}-net-xtables-addons %defattr(644,root,root,755) -%config(noreplace) %verify(not md5 mtime size) /etc/modprobe.d/xt_sysrq.conf +# restricted permissions - may contain password +%attr(600,root,root) %config(noreplace) %verify(not md5 mtime size) /etc/modprobe.d/xt_sysrq.conf +/lib/modules/%{_kernel_ver}/kernel/net/ipv4/netfilter/iptable_rawpost.ko.gz /lib/modules/%{_kernel_ver}/kernel/net/netfilter/compat_xtables.ko.gz /lib/modules/%{_kernel_ver}/kernel/net/netfilter/xt_*.ko.gz %endif