1 |
commit: 19438b0fad4cfeb9e4ea5e370f3450fa8777c9ad |
2 |
Author: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
3 |
AuthorDate: Sun Nov 1 23:13:28 2020 +0000 |
4 |
Commit: Thomas Deutschmann <whissi <AT> gentoo <DOT> org> |
5 |
CommitDate: Sun Nov 1 23:41:06 2020 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=19438b0f |
7 |
|
8 |
net-firewall/iptables: bump to v1.8.6 |
9 |
|
10 |
Package-Manager: Portage-3.0.8, Repoman-3.0.2 |
11 |
Signed-off-by: Thomas Deutschmann <whissi <AT> gentoo.org> |
12 |
|
13 |
net-firewall/iptables/Manifest | 1 + |
14 |
net-firewall/iptables/iptables-1.8.6.ebuild | 179 ++++++++++++++++++++++++++++ |
15 |
2 files changed, 180 insertions(+) |
16 |
|
17 |
diff --git a/net-firewall/iptables/Manifest b/net-firewall/iptables/Manifest |
18 |
index b69236c7abf..741e8f800d7 100644 |
19 |
--- a/net-firewall/iptables/Manifest |
20 |
+++ b/net-firewall/iptables/Manifest |
21 |
@@ -2,3 +2,4 @@ DIST iptables-1.6.1.tar.bz2 620890 BLAKE2B b45ac26e1fb7e8b17a6df0afab3b6c0e2f0a5 |
22 |
DIST iptables-1.6.2.tar.bz2 639785 BLAKE2B 3d129756fd33c8c73d56d57e3c5595896db86ded14834a45db21b964d82840b62216ce3cea4ae4960e8c5f0671df3cc6bfb222f68d29cf3a8c99e0eee14bf017 SHA512 04f22e969c794246b9aa28055b202638081cfb0bb4a5625c049a30c48ac84cdd41db12a53c5831398cfe47c8f5691aa02b30b0ae3b5afe0f20ec48cf86a799c0 |
23 |
DIST iptables-1.8.4.tar.bz2 704312 BLAKE2B f677bb9ed2c86e6a39953c0565766991e9647224effdc7db2b563f3f491f6ace2f9073ecc8e865d489101a9f80cf964d9775ab81536412dbd4ca85937432de94 SHA512 a7faaab58608ffaa51e26e8056551c0e91a49187439d30fcf5cce2800274cc3c0515db6cfba0f4c85613fb80779cf96089b8915db0e89161e9980a6384faebdb |
24 |
DIST iptables-1.8.5.tar.bz2 713769 BLAKE2B 49659fc2f1f284f31637048fa1e6edb4853e9bf6ac0b6ada5599a7af34a4449205b5eb6b85b630ce4757b49cf3f8ac9ad6220e07c2c22abb688a3aeb5cf99cd2 SHA512 6a6baa541bb7aa331b176e0a91894e0766859814b59e77c71351ac34d6ebd337487981db48c70e476a48c67bcf891cfc663221a7582feb1496ad1df56eb28da8 |
25 |
+DIST iptables-1.8.6.tar.bz2 715744 BLAKE2B 72167610b396054fe18c495d7a9e23051d217116074ee39198af989a3e50b9908cb75f42b9172d3cfd76343835386a78a2c51d1153ed5d219a6d68209e11dc9c SHA512 d06e4cddb69822c4618664a35877fc5811992936cade2040bb0e4eb25a4d879eadc7c84401c40fb39ffac7888568505adcb1cfe995cd166a15c702237daf6acf |
26 |
|
27 |
diff --git a/net-firewall/iptables/iptables-1.8.6.ebuild b/net-firewall/iptables/iptables-1.8.6.ebuild |
28 |
new file mode 100644 |
29 |
index 00000000000..b496e8ccd7e |
30 |
--- /dev/null |
31 |
+++ b/net-firewall/iptables/iptables-1.8.6.ebuild |
32 |
@@ -0,0 +1,179 @@ |
33 |
+# Copyright 1999-2020 Gentoo Authors |
34 |
+# Distributed under the terms of the GNU General Public License v2 |
35 |
+ |
36 |
+EAPI=7 |
37 |
+ |
38 |
+inherit multilib systemd toolchain-funcs autotools flag-o-matic usr-ldscript |
39 |
+ |
40 |
+DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools" |
41 |
+HOMEPAGE="https://www.netfilter.org/projects/iptables/" |
42 |
+SRC_URI="https://www.netfilter.org/projects/iptables/files/${P}.tar.bz2" |
43 |
+ |
44 |
+LICENSE="GPL-2" |
45 |
+# Subslot reflects PV when libxtables and/or libip*tc was changed |
46 |
+# the last time. |
47 |
+SLOT="0/1.8.3" |
48 |
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~riscv ~s390 ~sparc ~x86" |
49 |
+IUSE="conntrack ipv6 netlink nftables pcap static-libs" |
50 |
+ |
51 |
+BUILD_DEPEND=" |
52 |
+ >=app-eselect/eselect-iptables-20200508 |
53 |
+" |
54 |
+COMMON_DEPEND=" |
55 |
+ conntrack? ( >=net-libs/libnetfilter_conntrack-1.0.6 ) |
56 |
+ netlink? ( net-libs/libnfnetlink ) |
57 |
+ nftables? ( |
58 |
+ >=net-libs/libmnl-1.0:0= |
59 |
+ >=net-libs/libnftnl-1.1.6:0= |
60 |
+ ) |
61 |
+ pcap? ( net-libs/libpcap ) |
62 |
+" |
63 |
+DEPEND="${COMMON_DEPEND} |
64 |
+ virtual/os-headers |
65 |
+ >=sys-kernel/linux-headers-4.4:0 |
66 |
+" |
67 |
+BDEPEND="${BUILD_DEPEND} |
68 |
+ app-eselect/eselect-iptables |
69 |
+ virtual/pkgconfig |
70 |
+ nftables? ( |
71 |
+ sys-devel/flex |
72 |
+ virtual/yacc |
73 |
+ ) |
74 |
+" |
75 |
+RDEPEND="${COMMON_DEPEND} |
76 |
+ ${BUILD_DEPEND} |
77 |
+ nftables? ( net-misc/ethertypes ) |
78 |
+ !<net-firewall/ebtables-2.0.11-r1 |
79 |
+ !<net-firewall/arptables-0.0.5-r1 |
80 |
+" |
81 |
+ |
82 |
+PATCHES=( |
83 |
+ "${FILESDIR}/iptables-1.8.4-no-symlinks.patch" |
84 |
+ "${FILESDIR}/iptables-1.8.2-link.patch" |
85 |
+) |
86 |
+ |
87 |
+src_prepare() { |
88 |
+ # use the saner headers from the kernel |
89 |
+ rm include/linux/{kernel,types}.h || die |
90 |
+ |
91 |
+ default |
92 |
+ eautoreconf |
93 |
+} |
94 |
+ |
95 |
+src_configure() { |
96 |
+ # Some libs use $(AR) rather than libtool to build #444282 |
97 |
+ tc-export AR |
98 |
+ |
99 |
+ # Hack around struct mismatches between userland & kernel for some ABIs. #472388 |
100 |
+ use amd64 && [[ ${ABI} == "x32" ]] && append-flags -fpack-struct |
101 |
+ |
102 |
+ sed -i \ |
103 |
+ -e "/nfnetlink=[01]/s:=[01]:=$(usex netlink 1 0):" \ |
104 |
+ -e "/nfconntrack=[01]/s:=[01]:=$(usex conntrack 1 0):" \ |
105 |
+ configure || die |
106 |
+ |
107 |
+ local myeconfargs=( |
108 |
+ --sbindir="${EPREFIX}/sbin" |
109 |
+ --libexecdir="${EPREFIX}/$(get_libdir)" |
110 |
+ --enable-devel |
111 |
+ --enable-shared |
112 |
+ $(use_enable nftables) |
113 |
+ $(use_enable pcap bpf-compiler) |
114 |
+ $(use_enable pcap nfsynproxy) |
115 |
+ $(use_enable static-libs static) |
116 |
+ $(use_enable ipv6) |
117 |
+ ) |
118 |
+ econf "${myeconfargs[@]}" |
119 |
+} |
120 |
+ |
121 |
+src_compile() { |
122 |
+ emake V=1 |
123 |
+} |
124 |
+ |
125 |
+src_install() { |
126 |
+ default |
127 |
+ dodoc INCOMPATIBILITIES iptables/iptables.xslt |
128 |
+ |
129 |
+ # all the iptables binaries are in /sbin, so might as well |
130 |
+ # put these small files in with them |
131 |
+ into / |
132 |
+ dosbin iptables/iptables-apply |
133 |
+ dosym iptables-apply /sbin/ip6tables-apply |
134 |
+ doman iptables/iptables-apply.8 |
135 |
+ |
136 |
+ insinto /usr/include |
137 |
+ doins include/iptables.h $(use ipv6 && echo include/ip6tables.h) |
138 |
+ insinto /usr/include/iptables |
139 |
+ doins include/iptables/internal.h |
140 |
+ |
141 |
+ keepdir /var/lib/iptables |
142 |
+ newinitd "${FILESDIR}"/${PN}-r2.init iptables |
143 |
+ newconfd "${FILESDIR}"/${PN}-r1.confd iptables |
144 |
+ if use ipv6 ; then |
145 |
+ keepdir /var/lib/ip6tables |
146 |
+ dosym iptables /etc/init.d/ip6tables |
147 |
+ newconfd "${FILESDIR}"/ip6tables-r1.confd ip6tables |
148 |
+ fi |
149 |
+ |
150 |
+ if use nftables; then |
151 |
+ # Bug 647458 |
152 |
+ rm "${ED}"/etc/ethertypes || die |
153 |
+ |
154 |
+ # Bugs 660886 and 669894 |
155 |
+ rm "${ED}"/sbin/{arptables,ebtables}{,-{save,restore}} || die |
156 |
+ fi |
157 |
+ |
158 |
+ systemd_dounit "${FILESDIR}"/systemd/iptables-{re,}store.service |
159 |
+ if use ipv6 ; then |
160 |
+ systemd_dounit "${FILESDIR}"/systemd/ip6tables-{re,}store.service |
161 |
+ fi |
162 |
+ |
163 |
+ # Move important libs to /lib #332175 |
164 |
+ gen_usr_ldscript -a ip{4,6}tc xtables |
165 |
+ |
166 |
+ find "${ED}" -type f -name "*.la" -delete || die |
167 |
+} |
168 |
+ |
169 |
+pkg_postinst() { |
170 |
+ local default_iptables="xtables-legacy-multi" |
171 |
+ if ! eselect iptables show &>/dev/null; then |
172 |
+ elog "Current iptables implementation is unset, setting to ${default_iptables}" |
173 |
+ eselect iptables set "${default_iptables}" |
174 |
+ fi |
175 |
+ |
176 |
+ if use nftables; then |
177 |
+ local tables |
178 |
+ for tables in {arp,eb}tables; do |
179 |
+ if ! eselect ${tables} show &>/dev/null; then |
180 |
+ elog "Current ${tables} implementation is unset, setting to ${default_iptables}" |
181 |
+ eselect ${tables} set xtables-nft-multi |
182 |
+ fi |
183 |
+ done |
184 |
+ fi |
185 |
+ |
186 |
+ eselect iptables show |
187 |
+} |
188 |
+ |
189 |
+pkg_prerm() { |
190 |
+ elog "Unsetting iptables symlinks before removal" |
191 |
+ eselect iptables unset |
192 |
+ |
193 |
+ if ! has_version 'net-firewall/ebtables'; then |
194 |
+ elog "Unsetting ebtables symlinks before removal" |
195 |
+ eselect ebtables unset |
196 |
+ elif [[ -z ${REPLACED_BY_VERSION} ]]; then |
197 |
+ elog "Resetting ebtables symlinks to ebtables-legacy" |
198 |
+ eselect ebtables set ebtables-legacy |
199 |
+ fi |
200 |
+ |
201 |
+ if ! has_version 'net-firewall/arptables'; then |
202 |
+ elog "Unsetting arptables symlinks before removal" |
203 |
+ eselect arptables unset |
204 |
+ elif [[ -z ${REPLACED_BY_VERSION} ]]; then |
205 |
+ elog "Resetting arptables symlinks to arptables-legacy" |
206 |
+ eselect arptables set arptables-legacy |
207 |
+ fi |
208 |
+ |
209 |
+ # the eselect module failing should not be fatal |
210 |
+ return 0 |
211 |
+} |