Get Gentoo!
gentoo.org sites
gentoo.org Wiki Bugs Forums Packages
Planet Archives Sources
Infra Status
summaryrefslogtreecommitdiff
path: root/net-firewall/nftables
Commit message (Collapse)AuthorAgeFilesLines
* net-firewall/nftables-0.9.6: Version bumpPatrick McLean2020-06-152-1/+1
| | | | | Package-Manager: Portage-2.3.101, Repoman-2.3.22 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/nftables-0.9.5: Don't require extra tarball with USE=-docPatrick McLean2020-06-072-4/+2
| | | | | Package-Manager: Portage-2.3.100, Repoman-2.3.22 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/nftables: Fixed installation with USE="-doc"Lars Wendler2020-06-072-1/+3
| | | | | | Closes: https://bugs.gentoo.org/727368 Package-Manager: Portage-2.3.100, Repoman-2.3.22 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables-0.9.5: Version bumpPatrick McLean2020-06-062-0/+152
| | | | | Package-Manager: Portage-2.3.100, Repoman-2.3.22 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/nftables-0.9.4-r{1,2}: Fix USE=-python (bug #717162)Patrick McLean2020-04-132-2/+2
| | | | | | Closes: https://bugs.gentoo.org/717162 Package-Manager: Portage-2.3.99, Repoman-2.3.22 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/nftables-0.9.4-r2: revbump, cleanup deps, provide man pagesPatrick McLean2020-04-074-0/+268
| | | | | | | | | | | | It turns out that flex and bison aren't actually needed to build, but there was a bug in the build system that made it abort if they weren't available. Add a patch to fix this bug, and remove the extra deps. Disable USE=doc by default and provide pre-built man pages in a separate tarball. Script to build them is at man-pages/gen-manpages.bash Package-Manager: Portage-2.3.96, Repoman-2.3.22 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/nftables-0.9.4-r1: revbump, call python_optimize, fix depsPatrick McLean2020-04-061-3/+6
| | | | | | | | | | | | | Call python_optimize to fix QA warning about unoptimized python code. The docbook2X dep is only needed for building man pages, so put it under the doc USE flag. Fix the pkg_postinst message about systemd (bug #705308) Closes: https://bugs.gentoo.org/705308 Package-Manager: Portage-2.3.96, Repoman-2.3.22 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* */*: Drop stable ia64 keywordsMatt Turner2020-04-031-1/+1
| | | | Signed-off-by: Matt Turner <mattst88@gentoo.org>
* net-firewall/nftables: Removed oldLars Wendler2020-04-027-596/+0
| | | | | Package-Manager: Portage-2.3.96, Repoman-2.3.22 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: Bump to version 0.9.4Lars Wendler2020-04-022-0/+145
| | | | | Package-Manager: Portage-2.3.96, Repoman-2.3.22 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables-0.9.3-r1: Add python3_8Patrick McLean2020-02-261-1/+1
| | | | | | Copyright: Sony Interactive Entertainment Inc. Package-Manager: Portage-2.3.89, Repoman-2.3.20 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-firewall/nftables: arm stable wrt bug #701852Mikle Kolyada2020-01-271-1/+1
| | | | | | Package-Manager: Portage-2.3.84, Repoman-2.3.20 RepoMan-Options: --include-arches="arm" Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* net-firewall/nftables: stable 0.9.3-r1 for ia64, bug #701852Sergei Trofimovich2020-01-151-1/+1
| | | | | | Package-Manager: Portage-2.3.84, Repoman-2.3.20 RepoMan-Options: --include-arches="ia64" Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
* net-firewall/nftables: amd64 stable wrt bug #701852Agostino Sarubbo2020-01-101-1/+1
| | | | | | Package-Manager: Portage-2.3.79, Repoman-2.3.16 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* net-firewall/nftables: x86 stable (bug #701852)Thomas Deutschmann2020-01-101-1/+1
| | | | | Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* */*: Clean PYTHON_COMPAT of obsolete implsMichał Górny2020-01-053-6/+6
| | | | | Closes: https://github.com/gentoo/gentoo/pull/14246 Signed-off-by: Michał Górny <mgorny@gentoo.org>
* net-firewall/nftables: keyword 0.9.3-r1 on ~ppc64Georgy Yakovlev2019-12-281-1/+1
| | | | | | Bug: https://bugs.gentoo.org/679888 Package-Manager: Portage-2.3.84, Repoman-2.3.20 Signed-off-by: Georgy Yakovlev <gyakovlev@gentoo.org>
* net-firewall/nftables: Depend on >=net-libs/libnftnl-1.1.5Francisco Blas (klondike) Izquierdo Riera2019-12-041-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Although upstreams reports that nftables 0.9.3 depends on libnftnl 1.1.4 or higher. Using said version results on the following errors: netlink.c: In function ‘netlink_delinearize_chain’: netlink.c:423:38: error: ‘NFTNL_CHAIN_DEVICES’ undeclared (first use in this function); did you mean ‘NFTNL_CHAIN_DEV’? } else if (nftnl_chain_is_set(nlc, NFTNL_CHAIN_DEVICES)) { ^~~~~~~~~~~~~~~~~~~ NFTNL_CHAIN_DEV netlink.c:423:38: note: each undeclared identifier is reported only once for each function it appears in netlink.c: In function ‘netlink_delinearize_obj’: netlink.c:1049:27: error: ‘NFTNL_OBJ_SYNPROXY_MSS’ undeclared (first use in this function); did you mean ‘NFTNL_EXPR_SYNPROXY_MSS’? nftnl_obj_get_u16(nlo, NFTNL_OBJ_SYNPROXY_MSS); ^~~~~~~~~~~~~~~~~~~~~~ NFTNL_EXPR_SYNPROXY_MSS netlink.c:1051:26: error: ‘NFTNL_OBJ_SYNPROXY_WSCALE’ undeclared (first use in this function); did you mean ‘NFTNL_EXPR_SYNPROXY_WSCALE’? nftnl_obj_get_u8(nlo, NFTNL_OBJ_SYNPROXY_WSCALE); ^~~~~~~~~~~~~~~~~~~~~~~~~ NFTNL_EXPR_SYNPROXY_WSCALE netlink.c:1053:27: error: ‘NFTNL_OBJ_SYNPROXY_FLAGS’ undeclared (first use in this function); did you mean ‘NFTNL_EXPR_SYNPROXY_FLAGS’? nftnl_obj_get_u32(nlo, NFTNL_OBJ_SYNPROXY_FLAGS); ^~~~~~~~~~~~~~~~~~~~~~~~ NFTNL_EXPR_SYNPROXY_FLAGS netlink.c: In function ‘netlink_delinearize_flowtable’: netlink.c:1137:3: warning: implicit declaration of function ‘nftnl_flowtable_get_u64’; did you mean ‘nftnl_flowtable_get_u32’? [-Wimplicit-function-declaration] nftnl_flowtable_get_u64(nlo, NFTNL_FLOWTABLE_HANDLE); ^~~~~~~~~~~~~~~~~~~~~~~ nftnl_flowtable_get_u32 netlink.c:1137:32: error: ‘NFTNL_FLOWTABLE_HANDLE’ undeclared (first use in this function); did you mean ‘NFTA_FLOWTABLE_HANDLE’? nftnl_flowtable_get_u64(nlo, NFTNL_FLOWTABLE_HANDLE); ^~~~~~~~~~~~~~~~~~~~~~ NFTA_FLOWTABLE_HANDLE Depend instead on version 1.1.5 or higher with which the compilation suceeds. Closes: https://bugs.gentoo.org/701976 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Port missing changes to 0.9.3Francisco Blas (klondike) Izquierdo Riera2019-12-041-2/+2
| | | | | | | | | | | | | | Lars added nftables-0.9.3 at the time I was doing the changes to rename the modern_kernel USE flag and move the skel files into its own folder in doc. As a result of this, I missed the ebuild and didn't update it. Update also the 0.9.3 ebuild so it follows the same conventions as the others. Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: fix modern_kernel flagMatthew Thode2019-12-031-4/+4
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Move skel filesFrancisco Blas (klondike) Izquierdo Riera2019-12-033-4/+107
| | | | | | | | | | | | | | | | | Currently the ebuild installs the skeleton files directly into the ebuild's doc directory. In 0.9.0-r5 the intention was installing them into a skels folder (although this was not done correctly). Replace the sed rules so that the skeleton files are installed into the skel folder. This will be cleaner if for some reason nftables adds further documentation on the future. It is also easier to perform this change now than once we stabilize. Bug: https://bugs.gentoo.org/671254 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: rename modern_kernel use flagFrancisco Blas (klondike) Izquierdo Riera2019-12-034-13/+13
| | | | | | | | | | | | | | | | | When the new scripts supporting atomic updates on modern kernels where introduced, usage of the new scripts was controlled by the modern_kernel USE flag. QA has requested that we avoid using underscores on USE flags as they are a reserved character. Rename the modern_kernel USE flag to modern-kernel to address this issue. Closes: https://bugs.gentoo.org/694838 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Bump to version 0.9.3Lars Wendler2019-12-032-0/+145
| | | | | Package-Manager: Portage-2.3.80, Repoman-2.3.19 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: Touch rules-save with right umaskFrancisco Blas (klondike) Izquierdo Riera2019-12-023-3/+3
| | | | | | | | | | | | | | | | | | The nftables ebuild contains code to ensure the rules-save file is created so the service will start on systemd based systems. The current code creates the file with default permissions 644 which triggers the code for detecting misconfigured system added to address bug #691326 Instead of just using touch, start a subshell so we can call umask beforehand and address the issue. Bug: https://bugs.gentoo.org/691326 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Drop vulnerable ebuildFrancisco Blas (klondike) Izquierdo Riera2019-12-021-97/+0
| | | | | | | | | | | Drop the nftables-0.9.0-r4 ebuild which is affected by the permission handling bug as all stable arches can now use -r5 instead. Bug: https://bugs.gentoo.org/691326 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.76, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: chmod -x files/libexec/nftables.shMike Gilbert2019-09-191-0/+0
| | | | | Bug: https://bugs.gentoo.org/694838 Signed-off-by: Mike Gilbert <floppym@gentoo.org>
* net-firewall/nftables: arm stable wrt bug #693716Mikle Kolyada2019-09-131-1/+1
| | | | | | Package-Manager: Portage-2.3.69, Repoman-2.3.16 RepoMan-Options: --include-arches="arm" Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* net-firewall/nftables: ia64 stable wrt bug #693716Agostino Sarubbo2019-09-131-1/+1
| | | | | | Package-Manager: Portage-2.3.69, Repoman-2.3.16 RepoMan-Options: --include-arches="ia64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* net-firewall/nftables: amd64 stable wrt bug #693716Agostino Sarubbo2019-09-091-1/+1
| | | | | | Package-Manager: Portage-2.3.69, Repoman-2.3.16 RepoMan-Options: --include-arches="amd64" Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
* net-firewall/nftables: x86 stable (bug #693716)Thomas Deutschmann2019-09-081-1/+1
| | | | | Package-Manager: Portage-2.3.75, Repoman-2.3.17 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-firewall/nftables: Fix permissions for rules.saveFrancisco Blas (klondike) Izquierdo Riera2019-09-075-5/+121
| | | | | | | | | | | | | | | | | | | | Due to a bug, the rules.save file was created with the wrong permissions which allowed all users to read the file with the system rules although root privileges are usually required to do so. To fix this issue, the following measures have been taken: * The umask on nftables-mk.sh is now correctly set to 177 * nftables.sh now also sets the umask before saving the rules * The ebuilds will warn on post installation if the rules.save has insecure permissions * The ebuilds have been bumped to ensure these changes are applied Bug: https://bugs.gentoo.org/691326 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.69, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables-0.9.2: added ~sparcMatt Turner2019-08-271-1/+1
| | | | Signed-off-by: Matt Turner <mattst88@gentoo.org>
* net-firewall/nftables: Bump to version 0.9.2Lars Wendler2019-08-232-0/+139
| | | | | Package-Manager: Portage-2.3.72, Repoman-2.3.17 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: Drop old versionsMatt Turner2019-07-283-169/+0
| | | | Signed-off-by: Matt Turner <mattst88@gentoo.org>
* net-firewall/nftables: arm stable wrt bug #688970Mikle Kolyada2019-07-281-1/+1
| | | | | | Package-Manager: Portage-2.3.66, Repoman-2.3.16 RepoMan-Options: --include-arches="arm" Signed-off-by: Mikle Kolyada <zlogene@gentoo.org>
* net-firewall/nftables: ia64 stable wrt bug #688970Agostino Sarubbo2019-07-021-1/+1
| | | | | | Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 RepoMan-Options: --include-arches="ia64"
* net-firewall/nftables: x86 stable wrt bug #688970Agostino Sarubbo2019-07-021-1/+1
| | | | | | Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 RepoMan-Options: --include-arches="x86"
* net-firewall/nftables: amd64 stable wrt bug #688970Agostino Sarubbo2019-07-021-1/+1
| | | | | | Signed-off-by: Agostino Sarubbo <ago@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 RepoMan-Options: --include-arches="amd64"
* net-firewall/nftables: add doc and xtables USE flagsFrancisco Blas (klondike) Izquierdo Riera2019-06-292-2/+9
| | | | | | | | | | | | | | | | | This commit adds some fixes on the 0.9.1 package: * Adds the doc USE flag to control building of the man pages * Adds the app-text/asciidoc when building the man pages * Adds the xtables USE flag for better compatibility with iptables-compat * Adds the net-firewall/iptables dependency when using the xtables flag I have chosen +doc, xtables for better compatibility with prior versions. Also whilst man pages generally make sense, the xtables USE isn't needed on pure nftables setups which are the recommended approach. Closes: https://bugs.gentoo.org/688952 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.66, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Same for PYTHON_REQUIRED_USELars Wendler2019-06-281-1/+1
| | | | | Package-Manager: Portage-2.3.67, Repoman-2.3.16 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: Move ${PYTHON_DEPS} into USE="python"Lars Wendler2019-06-281-1/+2
| | | | | Package-Manager: Portage-2.3.67, Repoman-2.3.16 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: Removed old.Lars Wendler2019-06-283-268/+0
| | | | | Package-Manager: Portage-2.3.67, Repoman-2.3.16 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: Bump to version 0.9.1Lars Wendler2019-06-284-0/+232
| | | | | Package-Manager: Portage-2.3.67, Repoman-2.3.16 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-firewall/nftables: add ~arm64 keywordStephen Klimaszewski2019-05-211-1/+1
| | | | | Package-Manager: Portage-2.3.66, Repoman-2.3.12 Signed-off-by: Stephen Klimaszewski <steev@gentoo.org>
* net-firewall/nftables: arm64 keyworded (bug #668906)Aaron Bauman2019-04-081-2/+2
| | | | | Signed-off-by: Aaron Bauman <bman@gentoo.org> Package-Manager: Portage-2.3.62, Repoman-2.3.11
* net-firewall/nftables: don't enable service by defaultMatthew Thode2019-01-281-0/+97
| | | | | | | Fixes: https://bugs.gentoo.org/676290 Package-Manager: Portage-2.3.51, Repoman-2.3.12 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Minor fixes on the script closes #675188Francisco Blas (klondike) Izquierdo Riera2019-01-152-3/+4
| | | | | | | | | | | | | | * Use printf instead of echo for better shell compatibility. * Use an include instead of concatenating the ruleset. (Note that this is likely to fail is the ruleset path contains special characters). * Empty the table first when executing panic actions. Fixes: https://bugs.gentoo.org/675188 Signed-off-by: Francisco Blas Izquierdo Riera (klondike) <klondike@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: Add atomic nftables updates for modern kernelsFrancisco Blas (klondike) Izquierdo Riera2019-01-075-0/+288
| | | | | | Signed-off-by: Francisco Blas Izquierdo Riera <klondike@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: fix dodoc callMatthew Thode2018-11-191-1/+1
| | | | | | Fixes: https://bugs.gentoo.org/671540 Package-Manager: Portage-2.3.51, Repoman-2.3.12 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>
* net-firewall/nftables: move nft skels to docMatthew Thode2018-11-191-0/+89
| | | | | | Closes: https://bugs.gentoo.org/671254 Package-Manager: Portage-2.3.51, Repoman-2.3.12 Signed-off-by: Matthew Thode <prometheanfire@gentoo.org>