[yast-devel] [Announcement] Ports for SuSEfirewall added via packages
Hi, I'd like to announce one major change in openSUSE 11.1 / SLE 11: In the past, YaST Firewall had a special SuSEFirewallServices library that covered the main services for YaST Firewall UI. See a small example of Samba Server: "samba-server" : $[ "name" : _("Samba Server"), "tcp_ports" : [ "netbios-ssn", "microsoft-ds" ], "udp_ports" : [ "netbios-ns", "netbios-dgm" ], "broadcast_ports" : [ "netbios-ns", "netbios-dgm" ], ], This statically-defined library has been obsoleted by feature "Service Definitions Added via Packages" since openSUSE 10.3, openSUSE 11.0 still contains these definitions but some have been already replaced with the new dynamically-defined services. All statically-defined services were dropped in openSUSE 11.1 / SLE 11, SuSEFirewallServices will only provide conversion to the new type of services if possible. Please, make sure your packages provide service definitions for SuSEfirewall2. See also: http://en.opensuse.org/SuSEfirewall2/Service_Definitions_Added_via_Packages There are still some bugs (enhancements) open (untouched) requesting to add these services: #251663, #247344, #247359, #247355, #251657, #247368, #247363. Feel free to add more :) Have a nice day Lukas -- Lukas Ocilka, YaST Developer (xn--luk-gla45d) ----------------------------------------------------------------- Ano, ano. Moudry rozkaz. Sam jsem nemel v tech gratulacich jasno.
On Wed, Jun 11, 2008 at 12:25:10PM +0200, Lukas Ocilka wrote:
All statically-defined services were dropped in openSUSE 11.1 / SLE 11, SuSEFirewallServices will only provide conversion to the new type of services if possible.
Please, make sure your packages provide service definitions for SuSEfirewall2. See also: http://en.opensuse.org/SuSEfirewall2/Service_Definitions_Added_via_Packages
What this means for yast module maintainers: you have to change code: map<string, any> fw_settings = $[ "services": [ "nfs-server" ], "display_details": true, ]; map<string,any> fw_cwm_widget = CWMFirewallInterfaces::CreateOpenFirewallWidget (fw_settings); The above will not work because "nfs-server" was a definition built into yast2-firewall, now dropped. You have to poke the target package maintainer to provide a firewall definition file and change "services" to (presumably) "service:nfs-server". Or am I wrong? There seems to be some conversion code: http://svn.opensuse.org/viewcvs/yast/trunk/yast2/library/network/src/SuSEFirewallServices.ycp?view=diff&r1=48220&r2=48221&pathrev=48221 -- Martin Vidner, YaST developer http://en.opensuse.org/User:Mvidner Kuracke oddeleni v restauraci je jako fekalni oddeleni v bazenu -- To unsubscribe, e-mail: yast-devel+unsubscribe@opensuse.org For additional commands, e-mail: yast-devel+help@opensuse.org
participants (2)
-
Lukas Ocilka
-
Martin Vidner