[opensuse-packaging] [Announcement] Ports for SuSEfirewall added via packages
Hi, I'd like to announce one major change in openSUSE 11.1 / SLE 11: In the past, YaST Firewall had a special SuSEFirewallServices library that covered the main services for YaST Firewall UI. See a small example of Samba Server: "samba-server" : $[ "name" : _("Samba Server"), "tcp_ports" : [ "netbios-ssn", "microsoft-ds" ], "udp_ports" : [ "netbios-ns", "netbios-dgm" ], "broadcast_ports" : [ "netbios-ns", "netbios-dgm" ], ], This statically-defined library has been obsoleted by feature "Service Definitions Added via Packages" since openSUSE 10.3, openSUSE 11.0 still contains these definitions but some have been already replaced with the new dynamically-defined services. All statically-defined services were dropped in openSUSE 11.1 / SLE 11, SuSEFirewallServices will only provide conversion to the new type of services if possible. Please, make sure your packages provide service definitions for SuSEfirewall2. See also: http://en.opensuse.org/SuSEfirewall2/Service_Definitions_Added_via_Packages There are still some bugs (enhancements) open (untouched) requesting to add these services: #251663, #247344, #247359, #247355, #251657, #247368, #247363. Feel free to add more :) Have a nice day Lukas -- Lukas Ocilka, YaST Developer (xn--luk-gla45d) ----------------------------------------------------------------- Ano, ano. Moudry rozkaz. Sam jsem nemel v tech gratulacich jasno.
Lukas Ocilka wrote:
Hi,
I'd like to announce one major change in openSUSE 11.1 / SLE 11: ... This statically-defined library has been obsoleted by feature "Service Definitions Added via Packages" since openSUSE 10.3, openSUSE 11.0 still contains these definitions but some have been already replaced with the new dynamically-defined services. ... Please, make sure your packages provide service definitions for SuSEfirewall2. See also: http://en.opensuse.org/SuSEfirewall2/Service_Definitions_Added_via_Packages
AFAICS this page describes the behavior added in 10.3. So what exactly will be changed in 11.1? Michal --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org
Michal Marek wrote:
Lukas Ocilka wrote:
Hi,
I'd like to announce one major change in openSUSE 11.1 / SLE 11: ... This statically-defined library has been obsoleted by feature "Service Definitions Added via Packages" since openSUSE 10.3, openSUSE 11.0 still contains these definitions but some have been already replaced with the new dynamically-defined services. ... Please, make sure your packages provide service definitions for SuSEfirewall2. See also: http://en.opensuse.org/SuSEfirewall2/Service_Definitions_Added_via_Packages
AFAICS this page describes the behavior added in 10.3. So what exactly will be changed in 11.1?
There will be no hard-coded services in SuSEFirewallServices YaST library anymore. Everything must be dynamically loaded otherwise YaST Firewall will ignore these open ports and show them only in "Advanced Configuration" as an unnamed set of allowed ports. In openSUSE 11.0, you can still open YaST Firewall and see "Samba Server" in services to allow without having samba-server installed. But YaST Firewall can not be responsible for defining ports that should be open for a particular service, instead that package/er is responsible. Bye L.
Lukas Ocilka wrote:
There will be no hard-coded services in SuSEFirewallServices YaST library anymore. Everything must be dynamically loaded otherwise YaST Firewall will ignore these open ports and show them only in "Advanced Configuration" as an unnamed set of allowed ports.
Ah, now I understand. So this is basically a reminder to those who haven't added a service definition to their package yet. I was worried that the existing definition need to be adapted to yet another scheme :). thanks, Michal --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-packaging+help@opensuse.org
participants (2)
-
Lukas Ocilka
-
Michal Marek