1 |
commit: e891cc7cc5a17f7fd4cbcb668fabcacc3549bff6 |
2 |
Author: Sam James <sam <AT> gentoo <DOT> org> |
3 |
AuthorDate: Wed Nov 30 04:12:35 2022 +0000 |
4 |
Commit: Sam James <sam <AT> gentoo <DOT> org> |
5 |
CommitDate: Wed Nov 30 04:13:36 2022 +0000 |
6 |
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=e891cc7c |
7 |
|
8 |
net-firewall/firewalld: add 1.2.2 |
9 |
|
10 |
Closes: https://bugs.gentoo.org/853055 |
11 |
Signed-off-by: Sam James <sam <AT> gentoo.org> |
12 |
|
13 |
net-firewall/firewalld/Manifest | 1 + |
14 |
net-firewall/firewalld/firewalld-1.2.2.ebuild | 216 ++++++++++++++++++++++++++ |
15 |
2 files changed, 217 insertions(+) |
16 |
|
17 |
diff --git a/net-firewall/firewalld/Manifest b/net-firewall/firewalld/Manifest |
18 |
index 148b643488f6..3d406f33b826 100644 |
19 |
--- a/net-firewall/firewalld/Manifest |
20 |
+++ b/net-firewall/firewalld/Manifest |
21 |
@@ -1,3 +1,4 @@ |
22 |
DIST firewalld-1.1.1.tar.gz 1325362 BLAKE2B 0167d9bc1c76da420dfe8aa5e6bfdd743116fbe6959d5920b972fac09c72608c90b9d6b2bb4bd7bb01250cbab2bdbb30a017becf5d050f490f4f289661e4366a SHA512 ecf75c30be63d2285d0b915b26d20e679c2f45f121c37b8cecc236da02d21039c692d1fec72e6c29d2a7b6de570daad573c230deacaef7491a2fd39c35332479 |
23 |
DIST firewalld-1.1.3.tar.gz 2124653 BLAKE2B 178afc1c76538abbc2927819f35a81a642aabe5d9139a7dde69c50e061e59ae9f362374cc0bbfb4e8ad25c99caf8e45ddd92f1709478afb109d700b16bf84e38 SHA512 5108b363017b947907f104fb361bcc85443fc1b523718d8e0883932cb212a447391c9cea8b1e3f69bb9cc1c3a05b9042a8b9d91798d1dd09d4d4a224c9ce9d71 |
24 |
DIST firewalld-1.2.1.tar.gz 2142992 BLAKE2B 4d9763373bc5b35fd4e9a435669bfba148b8ba7054c3ebb1c24ac96739bb62fa6b424b8b95bd9a0394716a36df5e9c3f4b84efcf4ca2811661265f548eedacef SHA512 a9b2d7346291d0c54e850913f2d40a08d121d64df75ee87655fa2ee022ade908c762e5b6d372d4e8879eec1138f73635ee9398cdb3703efe67039769c5e2a42a |
25 |
+DIST firewalld-1.2.2.tar.gz 2145443 BLAKE2B 495bbd79fdab6f84e97533654b1d2b378841f14a60052a816d399d0ac8c2e2fe588486fae00dceeab5a13f7e03b030ae6db71c27208da415773ad033f0ea4ea2 SHA512 1b37b2daedb818afa6fe9d1512bdeebe48e39c39f94926d8aa93837816c211e30760706f536d63f51407a493a17927568c47118218d935949e22a78f7821441c |
26 |
|
27 |
diff --git a/net-firewall/firewalld/firewalld-1.2.2.ebuild b/net-firewall/firewalld/firewalld-1.2.2.ebuild |
28 |
new file mode 100644 |
29 |
index 000000000000..13ed0ef9832e |
30 |
--- /dev/null |
31 |
+++ b/net-firewall/firewalld/firewalld-1.2.2.ebuild |
32 |
@@ -0,0 +1,216 @@ |
33 |
+# Copyright 1999-2022 Gentoo Authors |
34 |
+# Distributed under the terms of the GNU General Public License v2 |
35 |
+ |
36 |
+EAPI=8 |
37 |
+ |
38 |
+PYTHON_COMPAT=( python3_{8..10} ) |
39 |
+inherit bash-completion-r1 gnome2-utils linux-info optfeature plocale python-single-r1 systemd xdg-utils |
40 |
+ |
41 |
+DESCRIPTION="A firewall daemon with D-Bus interface providing a dynamic firewall" |
42 |
+HOMEPAGE="https://firewalld.org/" |
43 |
+SRC_URI="https://github.com/firewalld/firewalld/releases/download/v${PV}/${P}.tar.gz" |
44 |
+ |
45 |
+LICENSE="GPL-2+" |
46 |
+SLOT="0" |
47 |
+KEYWORDS="~amd64 ~arm ~arm64 ~ppc64 ~riscv ~x86" |
48 |
+IUSE="gui +nftables +iptables test" |
49 |
+# Tests previously restricted for bug #650760 |
50 |
+RESTRICT="!test? ( test ) test? ( userpriv )" |
51 |
+REQUIRED_USE="${PYTHON_REQUIRED_USE}" |
52 |
+ |
53 |
+RDEPEND="${PYTHON_DEPS} |
54 |
+ iptables? ( |
55 |
+ net-firewall/iptables[ipv6(+)] |
56 |
+ net-firewall/ebtables |
57 |
+ net-firewall/ipset |
58 |
+ nftables? ( net-firewall/nftables[xtables(+)] ) |
59 |
+ ) |
60 |
+ || ( >=sys-apps/openrc-0.11.5 sys-apps/systemd ) |
61 |
+ $(python_gen_cond_dep ' |
62 |
+ dev-python/dbus-python[${PYTHON_USEDEP}] |
63 |
+ dev-python/pygobject:3[${PYTHON_USEDEP}] |
64 |
+ gui? ( |
65 |
+ x11-libs/gtk+:3 |
66 |
+ dev-python/PyQt5[gui,widgets,${PYTHON_USEDEP}] |
67 |
+ ) |
68 |
+ nftables? ( >=net-firewall/nftables-0.9.4[python,json] ) |
69 |
+ ')" |
70 |
+DEPEND="${RDEPEND} |
71 |
+ dev-libs/glib:2" |
72 |
+BDEPEND="app-text/docbook-xml-dtd |
73 |
+ >=dev-util/intltool-0.35 |
74 |
+ sys-devel/gettext" |
75 |
+ |
76 |
+# Testsuite's Makefile.am calls missing(!) |
77 |
+# ... but this seems to be consistent with the autoconf docs? |
78 |
+# Needs more investigation: https://www.gnu.org/software/autoconf/manual/autoconf-2.67/html_node/autom4te-Invocation.html |
79 |
+QA_AM_MAINTAINER_MODE=".*--run autom4te --language=autotest.*" |
80 |
+ |
81 |
+PLOCALES="ar as ast bg bn_IN ca cs da de el en_GB en_US es et eu fa fi fr gl gu hi hr hu ia id it ja ka kn ko lt ml mr nl or pa pl pt pt_BR ru si sk sq sr sr@latin sv ta te tr uk zh_CN zh_TW" |
82 |
+ |
83 |
+pkg_setup() { |
84 |
+ # See bug #830132 for the huge list |
85 |
+ # We can probably narrow it down a bit but it's rather fragile |
86 |
+ local CONFIG_CHECK="~NF_CONNTRACK ~NETFILTER_XT_MATCH_CONNTRACK |
87 |
+ ~NETFILTER |
88 |
+ ~NETFILTER_ADVANCED |
89 |
+ ~NETFILTER_INGRESS |
90 |
+ ~NF_NAT_MASQUERADE |
91 |
+ ~NF_NAT_REDIRECT |
92 |
+ ~NF_TABLES_INET |
93 |
+ ~NF_TABLES_IPV4 |
94 |
+ ~NF_TABLES_IPV6 |
95 |
+ ~NF_CONNTRACK |
96 |
+ ~NF_CONNTRACK_BROADCAST |
97 |
+ ~NF_CONNTRACK_NETBIOS_NS |
98 |
+ ~NF_CONNTRACK_TFTP |
99 |
+ ~NF_CT_NETLINK |
100 |
+ ~NF_CT_NETLINK_HELPER |
101 |
+ ~NF_DEFRAG_IPV4 |
102 |
+ ~NF_DEFRAG_IPV6 |
103 |
+ ~NF_NAT |
104 |
+ ~NF_NAT_TFTP |
105 |
+ ~NF_REJECT_IPV4 |
106 |
+ ~NF_REJECT_IPV6 |
107 |
+ ~NF_SOCKET_IPV4 |
108 |
+ ~NF_SOCKET_IPV6 |
109 |
+ ~NF_TABLES |
110 |
+ ~NF_TPROXY_IPV4 |
111 |
+ ~NF_TPROXY_IPV6 |
112 |
+ ~IP_NF_FILTER |
113 |
+ ~IP_NF_IPTABLES |
114 |
+ ~IP_NF_MANGLE |
115 |
+ ~IP_NF_NAT |
116 |
+ ~IP_NF_RAW |
117 |
+ ~IP_NF_SECURITY |
118 |
+ ~IP_NF_TARGET_MASQUERADE |
119 |
+ ~IP_NF_TARGET_REJECT |
120 |
+ ~IP6_NF_FILTER |
121 |
+ ~IP6_NF_IPTABLES |
122 |
+ ~IP6_NF_MANGLE |
123 |
+ ~IP6_NF_NAT |
124 |
+ ~IP6_NF_RAW |
125 |
+ ~IP6_NF_SECURITY |
126 |
+ ~IP6_NF_TARGET_MASQUERADE |
127 |
+ ~IP6_NF_TARGET_REJECT |
128 |
+ ~IP_SET |
129 |
+ ~NETFILTER_CONNCOUNT |
130 |
+ ~NETFILTER_NETLINK |
131 |
+ ~NETFILTER_NETLINK_OSF |
132 |
+ ~NETFILTER_NETLINK_QUEUE |
133 |
+ ~NETFILTER_SYNPROXY |
134 |
+ ~NETFILTER_XTABLES |
135 |
+ ~NETFILTER_XT_CONNMARK |
136 |
+ ~NETFILTER_XT_MATCH_CONNTRACK |
137 |
+ ~NETFILTER_XT_MATCH_MULTIPORT |
138 |
+ ~NETFILTER_XT_MATCH_STATE |
139 |
+ ~NETFILTER_XT_NAT |
140 |
+ ~NETFILTER_XT_TARGET_MASQUERADE |
141 |
+ ~NFT_COMPAT |
142 |
+ ~NFT_CT |
143 |
+ ~NFT_FIB |
144 |
+ ~NFT_FIB_INET |
145 |
+ ~NFT_FIB_IPV4 |
146 |
+ ~NFT_FIB_IPV6 |
147 |
+ ~NFT_HASH |
148 |
+ ~NFT_LIMIT |
149 |
+ ~NFT_LOG |
150 |
+ ~NFT_MASQ |
151 |
+ ~NFT_NAT |
152 |
+ ~NFT_OBJREF |
153 |
+ ~NFT_QUEUE |
154 |
+ ~NFT_QUOTA |
155 |
+ ~NFT_REDIR |
156 |
+ ~NFT_REJECT |
157 |
+ ~NFT_REJECT_INET |
158 |
+ ~NFT_REJECT_IPV4 |
159 |
+ ~NFT_REJECT_IPV6 |
160 |
+ ~NFT_SOCKET |
161 |
+ ~NFT_SYNPROXY |
162 |
+ ~NFT_TPROXY |
163 |
+ ~NFT_TUNNEL |
164 |
+ ~NFT_XFRM" |
165 |
+ |
166 |
+ # kernel >= 4.19 has unified a NF_CONNTRACK module, bug #692944 |
167 |
+ if kernel_is -lt 4 19; then |
168 |
+ CONFIG_CHECK+=" ~NF_CONNTRACK_IPV4 ~NF_CONNTRACK_IPV6" |
169 |
+ fi |
170 |
+ |
171 |
+ # bug #831259 |
172 |
+ if kernel_is -le 5 4 ; then |
173 |
+ CONFIG_CHECK+=" ~NF_TABLES_SET" |
174 |
+ fi |
175 |
+ |
176 |
+ # bug #853055 |
177 |
+ if kernel_is -lt 5 18 ; then |
178 |
+ CONFIG_CHECK+=" ~NFT_COUNTER" |
179 |
+ fi |
180 |
+ |
181 |
+ linux-info_pkg_setup |
182 |
+} |
183 |
+ |
184 |
+src_prepare() { |
185 |
+ default |
186 |
+ |
187 |
+ plocale_find_changes "po" "" ".po" || die |
188 |
+ plocale_get_locales | sed -e 's/ /\n/g' > po/LINGUAS |
189 |
+} |
190 |
+ |
191 |
+src_configure() { |
192 |
+ python_setup |
193 |
+ |
194 |
+ local myeconfargs=( |
195 |
+ --enable-systemd |
196 |
+ $(use_with iptables iptables "${EPREFIX}/sbin/iptables") |
197 |
+ $(use_with iptables iptables_restore "${EPREFIX}/sbin/iptables-restore") |
198 |
+ $(use_with iptables ip6tables "${EPREFIX}/sbin/ip6tables") |
199 |
+ $(use_with iptables ip6tables_restore "${EPREFIX}/sbin/ip6tables-restore") |
200 |
+ $(use_with iptables ebtables "${EPREFIX}/sbin/ebtables") |
201 |
+ $(use_with iptables ebtables_restore "${EPREFIX}/sbin/ebtables-restore") |
202 |
+ $(use_with iptables ipset "${EPREFIX}/usr/sbin/ipset") |
203 |
+ --with-systemd-unitdir="$(systemd_get_systemunitdir)" |
204 |
+ --with-bashcompletiondir="$(get_bashcompdir)" |
205 |
+ ) |
206 |
+ |
207 |
+ econf "${myeconfargs[@]}" |
208 |
+} |
209 |
+ |
210 |
+src_install() { |
211 |
+ default |
212 |
+ python_optimize |
213 |
+ |
214 |
+ # Get rid of junk |
215 |
+ rm -rf "${D}/etc/sysconfig/" || die |
216 |
+ |
217 |
+ # For non-gui installs we need to remove GUI bits |
218 |
+ if ! use gui; then |
219 |
+ rm -rf "${D}/etc/xdg/autostart" || die |
220 |
+ rm -f "${D}/usr/bin/firewall-applet" || die |
221 |
+ rm -f "${D}/usr/bin/firewall-config" || die |
222 |
+ rm -rf "${D}/usr/share/applications" || die |
223 |
+ rm -rf "${D}/usr/share/icons" || die |
224 |
+ fi |
225 |
+ |
226 |
+ newinitd "${FILESDIR}"/firewalld.init firewalld |
227 |
+ |
228 |
+ # Our version drops the/an obsolete 'conflicts' line with old iptables services |
229 |
+ # bug #833506 |
230 |
+ systemd_dounit "${FILESDIR}"/firewalld.service |
231 |
+} |
232 |
+ |
233 |
+pkg_preinst() { |
234 |
+ gnome2_schemas_savelist |
235 |
+} |
236 |
+ |
237 |
+pkg_postinst() { |
238 |
+ xdg_icon_cache_update |
239 |
+ gnome2_schemas_update |
240 |
+ |
241 |
+ # bug #833569 |
242 |
+ optfeature "changing zones with NetworkManager" gnome-extra/nm-applet |
243 |
+} |
244 |
+ |
245 |
+pkg_postrm() { |
246 |
+ xdg_icon_cache_update |
247 |
+ gnome2_schemas_update |
248 |
+} |