Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

firewall-macros-0.5.3-lp150.1.1 RPM for noarch

From OpenSuSE Leap 15.0 for noarch

Name: firewall-macros Distribution: openSUSE Leap 15.0
Version: 0.5.3 Vendor: openSUSE
Release: lp150.1.1 Build date: Tue May 15 17:52:21 2018
Group: Productivity/Networking/Security Build host: cloud138
Size: 239 Source RPM: firewalld-0.5.3-lp150.1.1.src.rpm
Summary: FirewallD RPM macros
This package provides the firewalld RPM macros file needed by packages
which provide their own firewalld service files.






* Mon May 14 2018
  - Update to 0.5.3 (bsc#1093120)
    * tests/regression: add test for ipset with timeout
    * ipset: allow adding entries to ipsets with timeout
    * translations: update
    * helpers: load helper module explicitly if no port given
    * helpers: nf_conntrack_proto-* helpers needs name cropped
    * config/Makefile: correct name of proto-gre helper
    * tests/regression: test helper nf_conntrack_proto_gre (#263)
    * functions: get_nf_nat_helpers() should look in other directories too
    * functions: Allow nf_conntrack_proto_* helpers
    * services: Add GRE
    * helpers: Add proto-gre
    * tests/regression: add test to verify ICMP block in forward chain
    * ipXtables: fix ICMP block not being present in FORWARD chain
* Wed Apr 18 2018
  - Translations update to version 20180417 (bsc#1081623):
    * Minor fixes of ar, ko, nl.
* Tue Apr 10 2018
  - Translations update (bsc#1081623).
* Fri Mar 16 2018
  - Backport upstream patches to add additional services (bsc#1082033)
    * firewalld-add-additional-services.patch
* Wed Mar 14 2018
  - Update to 0.5.2
    * fix rule deduplication causing accidental removal of rules
    * log failure to parse direct rules xml as an error
    * firewall-config: Break infinite loop when firewalld is not
      running (bsc#1082470, bsc#1085205)
    * fix set-log-denied not taking effect
    * po: update translations
  - Remove obsolete patches which are now upstream
    * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
    * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch
* Tue Mar 06 2018
  - Update to 0.5.1 (bsc#1084026)
    * ipXtables: fix iptables-restore wait option detection
    * python3: use "foo in dict" not dict.has_key(foo)
    * Fix potential python3 keys() incompatibility in watcher
    * Fixed python3 compatibility
    * ebtables: fix missing default value to set_rule()
    * fw_zone: fix invalid reference to __icmp_block_inversion
    * zones: Correct and defer check_name for combined zones
    * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
    * Add nmea-0183 service
    * Add sycthing-gui service
    * Add syncthing service
    * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
    * services/high-availability: Add port 9929
    * Fix and improve firewalld-sysctls.conf
    * firewalld: also reload dbus config interface for global options
    * Add MongoDB service definition
    * src: firewall: Add support for SUSE ifcfg scripts
    * Add UPnP client service
    * firewalld: Allow specifying log file location
    * firewalld/firewall-offline-cmd: Allow setting system config directories
  - Drop obsolete patch
    * 0001-suse-ifcfg-files.patch
  - Drop tests installation
* Wed Feb 28 2018
  - Add upstream patches to fix endless loop in firewall-config when
    firewalld is not running (bsc#1082470)
    * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
    * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch
* Thu Feb 01 2018
  - Remove high-availability service. SUSE HA uses the cluster service
    provided by the yast2-cluster package (bsc#1078223)
* Thu Dec 21 2017
  - Introduce new python3-firewall and firewall-macros subpackages.
    The first one contains the firewalld python3 bindings and the second
    one contains the RPM macros for firewalld.
* Wed Nov 29 2017
  - Replace dbus-1-python requires with dbus-1-python3: since
    firewalld was migrated to python3, we also have to require the
    python3 dependencies (boo#1070310).
* Tue Nov 28 2017
  - Add missing python3-gobject-Gdk dependency (boo#1069952)
* Thu Nov 23 2017
  - Replace references to /var/adm/fillup-templates with new
    %_fillupdir macro (boo#1069468)
* Sun Nov 19 2017
  - Make sure to use python3 everywhere (boo#1068778)
* Thu Nov 16 2017
  - Add combined upstream patch to support SUSE ifcfg network files.
    * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)
* Wed Nov 15 2017
  - Update to version
    * firewall.core.fw_config: Fix check for icmp builtin name
    * docker-swarm: fix incorrect attribute
    * xmlschema/service.xsd: Fix protocol looking for name instead of value
    * Add docker swarm service (gh#firewalld/firewalld#230)
    * Adding FirewallD redis service (gh#firewalld/firewalld#248)
    * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
    * firewall-offline-cmd: Don't require root for help output
    * doc: firewall-cmd: Document --query-* options return codes
    * firewall-cmd: Use colors only if output is a TTY
    * core: Log unsupported ICMP types as informational only
    * add bgp service to predefined services edit to config/
    * Add git service
    * Add kprop service
    * minidlna definitions (gh#firewalld/firewalld#236)
    * SpiderOak ONE listens on port 21327 and 21328
    * Allow skipping configure via NOCONFIGURE env var
    * Add missing ports to RH-Satellite-6 service
    * Reload nf_conntrack sysctls after the module is loaded
    * Add NFSv3 service.
    * config/ Add murmur service (a95eed1)
    * add new service IRC
    * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
    * firewall.core.fw: Fix possible dict size change in for loop
    * firewall.core.fw: Use new firewalld git repo in firewalld organization
    * config/ Use new firewalld git repo in firewalld organization
    * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
    * Add checks for Rich_Source validation
    * Handle also IPv6 with the zone masquerade flag
    * Add IPv6 support for forward-ports in zones
    * firewall.command: Enable parse_forward_port to work with IPv6 adresses
    * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
    * add Murmur (Mumble server) service
  - spec file fixes to avoid rpmlint warnings about duplicate files.
* Wed Nov 08 2017
  - Switch to python3
  - Run spec cleaner
  - Move autogen to build section
  - Add systemd requirements
* Tue Jun 06 2017
  - Update to version
    * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
    * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
    * firewall-cmd: Fix --{set,get}-{short,description} for zone
    * firewall.core.ipXtables: Use new wait option for restore commands if available
    * Adding ovirt-vmconsole service file
    * Adding oVirt storage-console service.
    * Adding ctdb service file.
    * Adding service file for nrpe.
    * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
    * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
    * firewall.core.fw_config: Fix wrong variable use in repr output
    * firewall.core.fw_icmptype: Add missing import for copy
    * firewall.core.fw_test: Fix wrong format string in repr
    * Fix getattr use on super(Zone)
    * firewall.functions: New function get_nf_nat_helpers
    * firewall.core.fw: Get NAT helpers and store them internally.
    * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
    * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
    * firewall.server.firewalld: New property for NAT helpers supported by the kernel
* Mon Mar 27 2017
  - Update to version
    * Drop references to from spec file and
    * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
    * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
    * firewall.server.firewalld: Provide information about the supported icmp types
    * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
    * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
    * firewall.core.ipXtables: New method supported_icmp_types
    * firewall-config: Deactivate edit buttons if there are no items
    * Fix permanent rich rules using icmp-type (rh#1434594)
    * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
    * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
  - Remove upstream patch:
    * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch
* Mon Feb 13 2017
  - Update to version
    * New service freeipa-trust (rh#1411650)
    * Complete icmp types for IPv4 and IPv6
    * New h323 helper container
    * Support helper container: h323
    * firewall.server.decorators: ALREADY_ errors should be logged as warnings
    * firewall.command: ALREADY_SET should also result in zero exit code
    * tests/ Only use firewall-offline-cmd
    * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
    * New checks for ipset entry validation
    * Use ipset dimension for match
    * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
    * New firewall.core.icmp providing names and types for icmp and icmpv6 values
    * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
    * firewall.errors: New error NOT_APPLIED
    * firewall-cmd man page: Add missing --get-ipset-types
    * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
    * firewall.core.prog: Fix addition of the error output in runProg
    * Speed up ipset handling, (re)loading and import from file
    * Support --family option for --new-ipset
    * Handle FirewallError for query sequences in command line tools
    * Fail to alter entries of ipsets with timeout
    * Extended tests for ipset options
    * Return empty list for ipsets using timeouts
    * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
    * firewalld.conf man page: New section about AutomaticHelpers
    * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
    * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
    * firewall.core.fw_zone: Limit masquerading forward rule to new connections
    * firewall-config: Update active zones on reloaded signal
    * firewall-applet: Update active zones and tooltip on reloaded signal
    * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
    * Support icmp-type usage in rich rules (rh#1409544)
    * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
    * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
    * Speed up start and restart for ipsets with lots of entries (rh#1416817)
    * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
    * Code cleanup and minor bug fixes
    * firewall.core.prog: Fix addition of the error output in runProg
    * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
    * Translation updates
  - Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
    * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch
* Mon Dec 05 2016
  - Update to version
    * firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem
    * firewall.core.fw_nm: create NMClient lazily
    * Do not use hard-coded path for modinfo, use autofoo to detect it
    * Dropped invalid option warning with bad format string
    * Properly handle quoted ifcfg values
    * firewall.core.fw_zone: Do not reset ZONE with ifdown
    * Updated translations from zanata
    * firewall-config: Extra grid at bottom to visualize firewalld settings
* Mon Nov 14 2016
  - Update to version
    * Translation updates form zanata
    * firewallctl: New support for helpers
    * firewallctl: Use sys.excepthook to force exception_handler usage always
    * firewall-config: Use proper source check in sourceDialog
* Mon Oct 31 2016
  - Update to version 0.4.4
    * firewall-applet: Use PyQt5
    * firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
      D-Bus property
    * New helpers Q.931 and RAS from nf_conntrack_h323
    * firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table
    * firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
    * New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
      sane, sip, snmp and tftp
    * firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones
    * firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
    * Misc bug fixes.
    * For the complete list of changes please see:
* Fri Sep 02 2016
  - Relax permissions for default installation files. The files in
    /usr/lib/firewalld are the default ones as shipped by the package and
    there is nothing secret in them.
* Tue Aug 16 2016
  - Update to version
    * Fixes CVE-2016-5410 (bsc#992772)
    * Standard error is now used for errors and warnings
    * Several fixes for use in change roots
    * Systemd service file changes
    * Fixed translations in firewall-config
    * Command line clients
    * Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)
* Tue Jul 05 2016
  - Update to version
    * Fix regression with unavailable optional commands
    * All missing backend messages should be warnings
    * Individual calls for missing restore commands
    * Only one authenticate call for add and remove options and also
    * New service RH-Satellite-6
* Tue Jun 28 2016
  - Update to version
    * firewall.command: Fix python3 DBusException message not interable error
    * src/ Fix path in firewall-[offline-] while installing
    * firewallctl: Do not trace back on list command without further arguments
    * firewallctl (man1): Added remaining sections zone, service, ..
    * firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting
    * firewall.server.config: Allow to set IndividualCalls property in config interface
    * Fix missing icmp rules for some zones
    * runProg: Fix issue with running programs
    * firewall-offline-cmd: Fix issues with missing system-config-firewall
    * firewall.core.ipXtables: Split up source and dest addresses for transaction
    * firewall.server.config: Log error in case of loading malformed files in watcher
    * Install and package the firewallctl man page
    * Translation updates
* Wed Jun 22 2016
  - Update to version 0.4.3
    * New firewallctl utility (rh#1147959)
    * doc.xml.seealso: Show firewalld.dbus in See Also sections
    * firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)
    * {zone,service,ipset,icmptype}_writer: Do not fail on failed backup
    * firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd
    * firewall-cmd: Dropped duplicate setType call in --new-ipset
    * radius service: Support also tcp ports (RBZ#1219717)
    * xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources
    * config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)
    * firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg
    * firewall.command: Only print summary and description in print_X_info with verbose
    * firewall.command: print_msg should be able to print empty lines
    * firewall-config: No processing of runtime passthroughs signals in permanent
    * fixes and pylint calm downs
    * Add zone_reader and zone_writer to all, pylint fixes
    * firewall-config: Fixed titles of command and context dialogs, also entry lenths
    * firewall-config: pylint calm downs
    * firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit
    * firewall-config: Use self.active_zoens in conf_zone_added_cb
    * firewall.command: New parse_port, extended parse methods with more checks
    * firewall.command: Fixed parse_port to use the separator in the split call
    * firewall.command: New [de]activate_exception_handler, raise error in parse_X
    * services ha: Allow corosync-qnetd port
    * firewall-applet: Support for kde5-nm-connection-editor
    * tests/ New tests for service and icmptype modifications
    * firewall-offline-cmd: Use FirewallCommand for simplification and sequence options
    * tests/ New tests for service and icmptype modifications
    * firewall-cmd: Fixed set, remove and query destination options for services
    * Source ports have not been checked in _check_config
    * firewall.core.fw_zone: Method check_source_port is not used, removed
    * firewall.core.base: Added default to ZONE_TARGETS
    * firewall.client: Allow to remove ipv:address pair for service destinations
    * tests/ There is no timeout option in permanent
    * firewall-cmd: fixes, pylint calm downs
    * firewall-cmd: Use FirewallCommand for simplification and sequence options
    * firewall.command: New FirewallCommand for command line client simplification
    * New services: kshell, rsh, ganglia-master, ganglia-client
    * firewalld: Cleanup of unused imports, do not translate some deamon messages
    * firewalld: With fd close interation in runProg, it is not needed here anymore
    * firewall.core.prog: Add fd close iteration to runProg
    * firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function
    * firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib
    * firewall-config: New add/remove ipset entries from file, remove all entries
    * firewall-applet: Fix tooltip after applet start with connection to firewalld
    * firewall-config: Select new zone, service or icmptype if the view was empty
    * firewalld.spec: Added build requires for iptables, ebtables and ipset
    * Adding nf_conntrack_sip module to the service SIP
    * firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
    * Drop unneeded python shebangs
    * Translation updates
  - Remove obsolete patches:
    * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch
    * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch
    * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
  - Add missing %{?_smp_mflags} during install. This will speed up
    the installation phase as well as expose build system's problems
    due to higher level of parallelism.
  - Run make during %build to ensure missing documentation is generated.
  - spec file cleanups.
* Wed Jun 08 2016
  - Add upstream patch to prevent unconditional dependencies to the
    NetworkManager typelib (gh#t-woerner/firewalld#119)
    * 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
* Tue May 31 2016
  - Update to version 0.4.2
    * New module to search for and change ifcfg files for interfaces
      not under control of NM
    * firewall_config: Enhanced messages in status bar
    * firewall-config: New message window as overlay if not connected
    * firewall-config: Fix sentivity of option, view menus and main
      paned if not connected
    * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
      some cleanup
    * firewall-[offline]cmd: Show target in zone information
    * D-Bus: Completed masquerade methods in FirewallClientZoneSettings
    * Fixed log-denied rules for icmp-blocks
    * Keep sorting of interfaces, services, icmp-blocks and other
      settings in zones
    * Fixed runtime-to-permanent not to save interfaces under control
      of NM
    * New icmp-block-inversion flag in the zones
    * ICMP type filtering in the zones
    * New services: sip, sips, managesieve
    * rich rules: Allow destination action (rh#1163428)
    * firewall-offline-cmd: New option -q/--quiet
    * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
    * firewall-[offline-]cmd: Fix option for setting the destination
    * firewall-config: Fixed resizing behaviour
    * New transaction model for speed ups in start, restart, stop and
      other actions
    * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
    * Fixed memory leak in dbus_introspection_add_properties
    * fixes, pylint calm downs
    * New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
    * ebtables-restore: No support for COMMIT command
    * Source port support in services, zones and rich rules
    * firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
    * firewall-config: New active bindings side bar for simple binding changes
    * Reworked NetworkManager module
    * Proper default zone handling for NM connections
    * Try to set zone binding with NM if interface is under control of NM
    * Code cleanup and bug fixes
    * Include test suite in the release and install in /usr/share/firewalld/tests
    * New Travis-CI configuration file
    * Fixed more broken frensh translations
    * Translation updates
  - Add upstream patches
    * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
      unneeded python shebangs
    * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
      not try to access the network-scripts ifcfg directory.
  - Drop rejected patch
    * drop-standard-output-error-systemd.patch
  - Minor spec file clean-up
* Fri May 06 2016
  - Avoid runtime dependency on systemd, the macros can all deal with
    its absence.
* Fri Apr 29 2016
  - Suggest the susefirewall2-to-firewalld package which could assist
    in migrating the SuSEFirewall2 iptables rules to FirewallD.
* Thu Apr 21 2016
  - Update to version
    * Install fw_nm module
    * firewalld: Do not fail if log file could not be opened
    * Make ipsets visible per default in firewall-config
    * Fixed translations with python3
    [changes in]
    * Fix for broken frensh translation
    [changes in 0.4.1]
    * Enhancements of ipset handling
    * No cleanup of ipsets using timeouts while reloading
    * Only destroy conflicting ipsets
    * Only use ipset types supported by the system
    * Add and remove several ipset entries in one call using a file
    * Reduce time frame where builtin chains are on policy DROP while reloading
    * Include descriptions in --info-X calls
    * Command line interface support to get and alter descriptions of zones,
    * services, ipsets and icmptypes with permanent option
    * Properly watch changes in combined zones
    * Fix logging in rich rule forward rules
    * Transformed direct.passthrough errors into warnings
    * Rework of import structures
    * Reduced calls to get ids for port and protocol names (rh#1305434)
    * Build and installation fixes by Markos Chandras
    * Provide D-Bus properties in introspection data
    * Fix for flaws found by
    * Fix for repeated SUGHUP
    * New NetworkManager module to get and set zones of connections, used in
      firewall-applet and firewall-config
    * configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
    * Code cleanups
    * Bug fixes
  - Fix drop-standard-output-error-systemd.patch tagging
  - Add libxslt-tools build dependency
* Tue Mar 08 2016
  - Do not recommend a specific version for the lang subpackage
* Tue Mar 01 2016
  - Move translations to a new subpackage
* Mon Feb 29 2016
  - Set DISABLE_RESTART_ON_UPDATE to 'yes' instead of '1'. The macros in
    /etc/rpm/macros.systemd only check for the 'yes' value so fix it to
    properly prevent the firewalld service from being restarted during
* Mon Feb 22 2016
  - Drop typelib(NetworkManager), NetworkManager-glib, gtk3
    and libnotify dependencies (see OBS SR#360792)
* Mon Feb 22 2016
  - firewall-config needs typelib(NetworkManager) to run
* Mon Feb 01 2016
  - Initial commit. Version 0.4.0
    * drop-standard-output-error-systemd.patch (gh#t-woerner/firewalld/pull/67)



Generated by rpm2html 1.8.1

Fabrice Bellet, Sat Oct 9 11:56:04 2021