1 |
commit: 548ab2ad0c046dc94fcd739f88059ffeecf6d3c8 |
2 |
Author: Lars Wendler <polynomial-c <AT> gentoo <DOT> org> |
3 |
AuthorDate: Tue May 28 00:33:38 2019 +0000 |
4 |
Commit: Lars Wendler <polynomial-c <AT> gentoo <DOT> org> |
5 |
CommitDate: Tue May 28 00:41:07 2019 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=548ab2ad |
7 |
|
8 |
net-firewall/iptables: Bump to version 1.8.3 |
9 |
|
10 |
Package-Manager: Portage-2.3.67, Repoman-2.3.13 |
11 |
Signed-off-by: Lars Wendler <polynomial-c <AT> gentoo.org> |
12 |
|
13 |
net-firewall/iptables/Manifest | 1 + |
14 |
net-firewall/iptables/iptables-1.8.3.ebuild | 131 ++++++++++++++++++++++++++++ |
15 |
2 files changed, 132 insertions(+) |
16 |
|
17 |
diff --git a/net-firewall/iptables/Manifest b/net-firewall/iptables/Manifest |
18 |
index 8808dd33a3a..5e0703efb12 100644 |
19 |
--- a/net-firewall/iptables/Manifest |
20 |
+++ b/net-firewall/iptables/Manifest |
21 |
@@ -3,3 +3,4 @@ DIST iptables-1.6.1.tar.bz2 620890 BLAKE2B b45ac26e1fb7e8b17a6df0afab3b6c0e2f0a5 |
22 |
DIST iptables-1.6.2.tar.bz2 639785 BLAKE2B 3d129756fd33c8c73d56d57e3c5595896db86ded14834a45db21b964d82840b62216ce3cea4ae4960e8c5f0671df3cc6bfb222f68d29cf3a8c99e0eee14bf017 SHA512 04f22e969c794246b9aa28055b202638081cfb0bb4a5625c049a30c48ac84cdd41db12a53c5831398cfe47c8f5691aa02b30b0ae3b5afe0f20ec48cf86a799c0 |
23 |
DIST iptables-1.8.1.tar.bz2 678706 BLAKE2B 671e7329cc07dae0fbc54c1f6061bc148c4823e1f675369ee36a7cd2346cc1a9a516d5aa2e8a3506d5400027c1ba306cbe426940894117710bc61aacd256fccd SHA512 96a896b6dd26c2d0b4e1672d428ea3c3aab0a3c9e56a896af3a2b8428c4212d7378ba555e0be198b0ccb3fd370bca529466ab8b4edc1777eb7deed600d3f0e11 |
24 |
DIST iptables-1.8.2.tar.bz2 679858 BLAKE2B 2004d85c89ecbc37ef0d571ac8ece680fd2e11a51b074f6387d6e9c4892da524c785d6bf3f30e26af4e7c2cb1f401d51bf8bcb21a91e380e24945374553139cb SHA512 8cf0f515764e1dc6e03284581d682d1949b33e8f25fea29c27ae856f1089fe8ca7b1814524b85f4378fd1fc7c7c7d002f06557b257ae2bbc945f8555bad0dc76 |
25 |
+DIST iptables-1.8.3.tar.bz2 716257 BLAKE2B 58c606a5753ae2cb8ada9039e4653d2abe03c7c9b6aeef1e458baa3e10e818893f35e8f2aed5221e692415115e618aa673c8fcd33d172f85e9d1b609ed79c7b8 SHA512 84b10080646077cbea78b7f3fcc58c6c6e1898213341c69862e1b48179f37a6820c3d84437c896071f966b61aa6d16b132d91948a85fd8c05740f29be3a0986d |
26 |
|
27 |
diff --git a/net-firewall/iptables/iptables-1.8.3.ebuild b/net-firewall/iptables/iptables-1.8.3.ebuild |
28 |
new file mode 100644 |
29 |
index 00000000000..51b1a40e408 |
30 |
--- /dev/null |
31 |
+++ b/net-firewall/iptables/iptables-1.8.3.ebuild |
32 |
@@ -0,0 +1,131 @@ |
33 |
+# Copyright 1999-2019 Gentoo Authors |
34 |
+# Distributed under the terms of the GNU General Public License v2 |
35 |
+ |
36 |
+EAPI=7 |
37 |
+ |
38 |
+# Force users doing their own patches to install their own tools |
39 |
+AUTOTOOLS_AUTO_DEPEND=no |
40 |
+ |
41 |
+inherit multilib systemd toolchain-funcs autotools flag-o-matic |
42 |
+ |
43 |
+DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools" |
44 |
+HOMEPAGE="https://www.netfilter.org/projects/iptables/" |
45 |
+SRC_URI="https://www.netfilter.org/projects/iptables/files/${P}.tar.bz2" |
46 |
+ |
47 |
+LICENSE="GPL-2" |
48 |
+# Subslot tracks libxtables as that's the one other packages generally link |
49 |
+# against and iptables changes. Will have to revisit if other sonames change. |
50 |
+SLOT="0/12" |
51 |
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sh ~sparc ~x86" |
52 |
+IUSE="conntrack ipv6 netlink nftables pcap static-libs" |
53 |
+ |
54 |
+COMMON_DEPEND=" |
55 |
+ conntrack? ( >=net-libs/libnetfilter_conntrack-1.0.6 ) |
56 |
+ netlink? ( net-libs/libnfnetlink ) |
57 |
+ nftables? ( |
58 |
+ >=net-libs/libmnl-1.0:0= |
59 |
+ >=net-libs/libnftnl-1.1.3:0= |
60 |
+ ) |
61 |
+ pcap? ( net-libs/libpcap ) |
62 |
+" |
63 |
+DEPEND="${COMMON_DEPEND} |
64 |
+ virtual/os-headers |
65 |
+ >=sys-kernel/linux-headers-4.4:0 |
66 |
+" |
67 |
+BDEPEND=" |
68 |
+ virtual/pkgconfig |
69 |
+ nftables? ( |
70 |
+ sys-devel/flex |
71 |
+ virtual/yacc |
72 |
+ ) |
73 |
+" |
74 |
+RDEPEND="${COMMON_DEPEND} |
75 |
+ nftables? ( net-misc/ethertypes ) |
76 |
+" |
77 |
+ |
78 |
+src_prepare() { |
79 |
+ # use the saner headers from the kernel |
80 |
+ rm include/linux/{kernel,types}.h || die |
81 |
+ |
82 |
+ # Only run autotools if user patched something |
83 |
+ eapply_user && eautoreconf || elibtoolize |
84 |
+} |
85 |
+ |
86 |
+src_configure() { |
87 |
+ # Some libs use $(AR) rather than libtool to build #444282 |
88 |
+ tc-export AR |
89 |
+ |
90 |
+ # Hack around struct mismatches between userland & kernel for some ABIs. #472388 |
91 |
+ use amd64 && [[ ${ABI} == "x32" ]] && append-flags -fpack-struct |
92 |
+ |
93 |
+ sed -i \ |
94 |
+ -e "/nfnetlink=[01]/s:=[01]:=$(usex netlink 1 0):" \ |
95 |
+ -e "/nfconntrack=[01]/s:=[01]:=$(usex conntrack 1 0):" \ |
96 |
+ configure || die |
97 |
+ |
98 |
+ local myeconfargs=( |
99 |
+ --sbindir="${EPREFIX}/sbin" |
100 |
+ --libexecdir="${EPREFIX}/$(get_libdir)" |
101 |
+ --enable-devel |
102 |
+ --enable-shared |
103 |
+ $(use_enable nftables) |
104 |
+ $(use_enable pcap bpf-compiler) |
105 |
+ $(use_enable pcap nfsynproxy) |
106 |
+ $(use_enable static-libs static) |
107 |
+ $(use_enable ipv6) |
108 |
+ ) |
109 |
+ econf "${myeconfargs[@]}" |
110 |
+} |
111 |
+ |
112 |
+src_compile() { |
113 |
+ # Deal with parallel build errors. |
114 |
+ use nftables && emake -C iptables xtables-config-parser.h |
115 |
+ emake V=1 |
116 |
+} |
117 |
+ |
118 |
+src_install() { |
119 |
+ default |
120 |
+ dodoc INCOMPATIBILITIES iptables/iptables.xslt |
121 |
+ |
122 |
+ # all the iptables binaries are in /sbin, so might as well |
123 |
+ # put these small files in with them |
124 |
+ into / |
125 |
+ dosbin iptables/iptables-apply |
126 |
+ dosym iptables-apply /sbin/ip6tables-apply |
127 |
+ doman iptables/iptables-apply.8 |
128 |
+ |
129 |
+ insinto /usr/include |
130 |
+ doins include/iptables.h $(use ipv6 && echo include/ip6tables.h) |
131 |
+ insinto /usr/include/iptables |
132 |
+ doins include/iptables/internal.h |
133 |
+ |
134 |
+ keepdir /var/lib/iptables |
135 |
+ newinitd "${FILESDIR}"/${PN}-r2.init iptables |
136 |
+ newconfd "${FILESDIR}"/${PN}-r1.confd iptables |
137 |
+ if use ipv6 ; then |
138 |
+ keepdir /var/lib/ip6tables |
139 |
+ dosym iptables /etc/init.d/ip6tables |
140 |
+ newconfd "${FILESDIR}"/ip6tables-r1.confd ip6tables |
141 |
+ fi |
142 |
+ |
143 |
+ if use nftables; then |
144 |
+ # Bug 647458 |
145 |
+ rm "${ED}"/etc/ethertypes || die |
146 |
+ |
147 |
+ # Bug 660886 |
148 |
+ rm "${ED}"/sbin/{arptables,ebtables} || die |
149 |
+ |
150 |
+ # Bug 669894 |
151 |
+ rm "${ED}"/sbin/ebtables-{save,restore} || die |
152 |
+ fi |
153 |
+ |
154 |
+ systemd_dounit "${FILESDIR}"/systemd/iptables-{re,}store.service |
155 |
+ if use ipv6 ; then |
156 |
+ systemd_dounit "${FILESDIR}"/systemd/ip6tables-{re,}store.service |
157 |
+ fi |
158 |
+ |
159 |
+ # Move important libs to /lib #332175 |
160 |
+ gen_usr_ldscript -a ip{4,6}tc iptc xtables |
161 |
+ |
162 |
+ find "${ED}" -type f -name "*.la" -delete || die |
163 |
+} |