commit firewalld for openSUSE:Factory
Hello community, here is the log from the commit of package firewalld for openSUSE:Factory checked in at 2016-06-02 12:39:18 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/firewalld (Old) and /work/SRC/openSUSE:Factory/.firewalld.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Package is "firewalld" Changes: -------- --- /work/SRC/openSUSE:Factory/firewalld/firewalld.changes 2016-05-30 09:55:53.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.firewalld.new/firewalld.changes 2016-06-02 12:39:19.000000000 +0200 @@ -1,0 +2,55 @@ +Tue May 31 08:30:44 UTC 2016 - mchandras@suse.de + +- Update to version 0.4.2 + * New module to search for and change ifcfg files for interfaces + not under control of NM + * firewall_config: Enhanced messages in status bar + * firewall-config: New message window as overlay if not connected + * firewall-config: Fix sentivity of option, view menus and main + paned if not connected + * firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls, + some cleanup + * firewall-[offline]cmd: Show target in zone information + * D-Bus: Completed masquerade methods in FirewallClientZoneSettings + * Fixed log-denied rules for icmp-blocks + * Keep sorting of interfaces, services, icmp-blocks and other + settings in zones + * Fixed runtime-to-permanent not to save interfaces under control + of NM + * New icmp-block-inversion flag in the zones + * ICMP type filtering in the zones + * New services: sip, sips, managesieve + * rich rules: Allow destination action (RHBZ#1163428) + * firewall-offline-cmd: New option -q/--quiet + * firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file + * firewall-[offline-]cmd: Fix option for setting the destination + address + * firewall-config: Fixed resizing behaviour + * New transaction model for speed ups in start, restart, stop and + other actions + * firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults + * Fixed memory leak in dbus_introspection_add_properties + * Landscape.io fixes, pylint calm downs + * New D-Bus getXnames methods to speed up firewall-config and firewall-cmd + * ebtables-restore: No support for COMMIT command + * Source port support in services, zones and rich rules + * firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets + * firewall-config: New active bindings side bar for simple binding changes + * Reworked NetworkManager module + * Proper default zone handling for NM connections + * Try to set zone binding with NM if interface is under control of NM + * Code cleanup and bug fixes + * Include test suite in the release and install in /usr/share/firewalld/tests + * New Travis-CI configuration file + * Fixed more broken frensh translations + * Translation updates +- Add upstream patches + * 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes + unneeded python shebangs + * 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do + not try to access the network-scripts ifcfg directory. +- Drop rejected patch + * drop-standard-output-error-systemd.patch +- Minor spec file clean-up + +------------------------------------------------------------------- Old: ---- drop-standard-output-error-systemd.patch firewalld-0.4.1.2.tar.bz2 New: ---- 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch firewalld-0.4.2.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ firewalld.spec ++++++ --- /var/tmp/diff_new_pack.xHGcKJ/_old 2016-06-02 12:39:20.000000000 +0200 +++ /var/tmp/diff_new_pack.xHGcKJ/_new 2016-06-02 12:39:20.000000000 +0200 @@ -17,17 +17,19 @@ Name: firewalld -Version: 0.4.1.2 +Version: 0.4.2 Release: 0 Summary: A firewall daemon with D-Bus interface providing a dynamic firewall License: GPL-2.0+ Group: Productivity/Networking/Security Url: http://www.firewalld.org Source: https://fedorahosted.org/released/%{name}/%{name}-%{version}.tar.bz2 -# PATCH-FIX-OPENSUSE: drop-standard-output-error-systemd.patch, -# https://github.com/t-woerner/firewalld/pull/67(pending) -- Do not supress -# stdout/stderr for firewalld -Patch0: drop-standard-output-error-systemd.patch +# PATCH-FIX-UPSTREAM: 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch +# Drop python shebangs +Patch0: 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch +# PATCH-FIX-UPSTREAM: 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch +# Do not access the ifcfg directory if it does not exist +Patch1: 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch BuildRequires: desktop-file-utils BuildRequires: docbook-xsl-stylesheets BuildRequires: gettext @@ -54,9 +56,7 @@ Recommends: %{name}-lang Suggests: susefirewall2-to-firewalld BuildArch: noarch -%if 0%{?suse_version} >= 1210 BuildRequires: systemd-rpm-macros -%endif %description firewalld is a firewall service daemon that provides a dynamic customizable @@ -91,6 +91,7 @@ %prep %setup -q %patch0 -p1 +%patch1 -p1 %build %configure --enable-sysconfig --enable-rpmmacros @@ -182,7 +183,7 @@ %{_libexecdir}/firewalld/services/*.xml %{_libexecdir}/firewalld/zones/*.xml %{_datadir}/polkit-1 -%{_sysconfdir}/rpm/macros.firewalld +%config %{_sysconfdir}/rpm/macros.firewalld %dir %{_sysconfdir}/dbus-1 %dir %{_sysconfdir}/dbus-1/system.d %attr(0750,root,root) %dir %{_libexecdir}/firewalld @@ -192,6 +193,7 @@ %attr(0750,root,root) %dir %{_libexecdir}/firewalld/services %attr(0750,root,root) %dir %{_libexecdir}/firewalld/zones %attr(0750,root,root) %dir %{_sysconfdir}/firewalld +%attr(0750,root,root) %{_datadir}/firewalld/tests %config(noreplace) %{_sysconfdir}/firewalld/firewalld.conf %config(noreplace) %{_sysconfdir}/firewalld/lockdown-whitelist.xml %attr(0750,root,root) %dir %{_sysconfdir}/firewalld/icmptypes @@ -230,6 +232,7 @@ %attr(0755,root,root) %{_bindir}/firewall-config %{_datadir}/firewalld/firewall-config.glade %attr(0755,root,root) %{_datadir}/firewalld/gtk3_chooserbutton.py* +%attr(0755,root,root) %{_datadir}/firewalld/gtk3_niceexpander.py* %{_datadir}/applications/firewall-config.desktop %dir %{_datadir}/appdata %{_datadir}/appdata/firewall-config.appdata.xml ++++++ 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch ++++++
From 705742816112dffefd3233f2c8dda7c845c6e8b3 Mon Sep 17 00:00:00 2001 From: Markos Chandras
Date: Tue, 31 May 2016 10:08:28 +0100 Subject: [PATCH] src: firewall: core: Drop unneeded python shebangs
The fw_ifcfg and fw_nm files are not supposed to be executed as standalone files but rather imported by the main firewalld code so drop the python shebangs. This also fixes a warning when building firewalld in openSUSE OBS: firewalld.noarch: W: non-executable-script /usr/lib/python2.7/site-packages/firewall/core/fw_nm.py 644 /usr/bin/python firewalld.noarch: W: non-executable-script /usr/lib/python2.7/site-packages/firewall/core/fw_ifcfg.py 644 /usr/bin/python --- src/firewall/core/fw_ifcfg.py | 1 - src/firewall/core/fw_nm.py | 1 - 2 files changed, 2 deletions(-) diff --git a/src/firewall/core/fw_ifcfg.py b/src/firewall/core/fw_ifcfg.py index 442a6cc..33794a7 100644 --- a/src/firewall/core/fw_ifcfg.py +++ b/src/firewall/core/fw_ifcfg.py @@ -1,4 +1,3 @@ -#!/usr/bin/python # -*- coding: utf-8 -*- # # Copyright (C) 2010-2016 Red Hat, Inc. diff --git a/src/firewall/core/fw_nm.py b/src/firewall/core/fw_nm.py index 38ef8fd..3df94c4 100644 --- a/src/firewall/core/fw_nm.py +++ b/src/firewall/core/fw_nm.py @@ -1,4 +1,3 @@ -#!/usr/bin/python # -*- coding: utf-8 -*- # # Copyright (C) 2010-2016 Red Hat, Inc. -- 2.8.3 ++++++ 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch ++++++
From 9ed2c18357d45f8ec1f11723a1d98377387c1039 Mon Sep 17 00:00:00 2001 From: Markos Chandras
Date: Tue, 31 May 2016 11:14:06 +0100 Subject: [PATCH] firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist
It's possible for the ifcfg directory to be missing or named differently
so do not try to access it if it does not exist. This avoid warnings
during firewalld start up like the following one:
ERROR: Calling post func
participants (1)
-
root@hilbert.suse.de