Hello community,
here is the log from the commit of package firewalld for openSUSE:Factory checked in at 2016-07-09 09:24:06
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/firewalld (Old)
and /work/SRC/openSUSE:Factory/.firewalld.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "firewalld"
Changes:
--------
--- /work/SRC/openSUSE:Factory/firewalld/firewalld.changes 2016-07-01 10:00:44.000000000 +0200
+++ /work/SRC/openSUSE:Factory/.firewalld.new/firewalld.changes 2016-07-09 09:24:09.000000000 +0200
@@ -1,0 +2,11 @@
+Tue Jul 5 14:02:18 UTC 2016 - mchandras@suse.de
+
+- Update to version 0.4.3.2
+ * Fix regression with unavailable optional commands
+ * All missing backend messages should be warnings
+ * Individual calls for missing restore commands
+ * Only one authenticate call for add and remove options and also
+ sequences
+ * New service RH-Satellite-6
+
+-------------------------------------------------------------------
Old:
----
firewalld-0.4.3.1.tar.bz2
New:
----
firewalld-0.4.3.2.tar.bz2
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ firewalld.spec ++++++
--- /var/tmp/diff_new_pack.vWRyzZ/_old 2016-07-09 09:24:11.000000000 +0200
+++ /var/tmp/diff_new_pack.vWRyzZ/_new 2016-07-09 09:24:11.000000000 +0200
@@ -17,7 +17,7 @@
Name: firewalld
-Version: 0.4.3.1
+Version: 0.4.3.2
Release: 0
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
License: GPL-2.0+
++++++ firewalld-0.4.3.1.tar.bz2 -> firewalld-0.4.3.2.tar.bz2 ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/aclocal.m4 new/firewalld-0.4.3.2/aclocal.m4
--- old/firewalld-0.4.3.1/aclocal.m4 2016-06-28 14:18:35.000000000 +0200
+++ new/firewalld-0.4.3.2/aclocal.m4 2016-07-04 17:10:15.000000000 +0200
@@ -295,8 +295,8 @@
# nls.m4 serial 5 (gettext-0.18)
-dnl Copyright (C) 1995-2003, 2005-2006, 2008-2014 Free Software Foundation,
-dnl Inc.
+dnl Copyright (C) 1995-2003, 2005-2006, 2008-2014, 2016 Free Software
+dnl Foundation, Inc.
dnl This file is free software; the Free Software Foundation
dnl gives unlimited permission to copy and/or distribute it,
dnl with or without modifications, as long as this notice is preserved.
@@ -327,32 +327,63 @@
AC_SUBST([USE_NLS])
])
-# pkg.m4 - Macros to locate and utilise pkg-config. -*- Autoconf -*-
-# serial 1 (pkg-config-0.24)
-#
-# Copyright © 2004 Scott James Remnant .
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, write to the Free Software
-# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that program.
-
-# PKG_PROG_PKG_CONFIG([MIN-VERSION])
-# ----------------------------------
+dnl pkg.m4 - Macros to locate and utilise pkg-config. -*- Autoconf -*-
+dnl serial 11 (pkg-config-0.29)
+dnl
+dnl Copyright © 2004 Scott James Remnant .
+dnl Copyright © 2012-2015 Dan Nicholson
+dnl
+dnl This program is free software; you can redistribute it and/or modify
+dnl it under the terms of the GNU General Public License as published by
+dnl the Free Software Foundation; either version 2 of the License, or
+dnl (at your option) any later version.
+dnl
+dnl This program is distributed in the hope that it will be useful, but
+dnl WITHOUT ANY WARRANTY; without even the implied warranty of
+dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+dnl General Public License for more details.
+dnl
+dnl You should have received a copy of the GNU General Public License
+dnl along with this program; if not, write to the Free Software
+dnl Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
+dnl 02111-1307, USA.
+dnl
+dnl As a special exception to the GNU General Public License, if you
+dnl distribute this file as part of a program that contains a
+dnl configuration script generated by Autoconf, you may include it under
+dnl the same distribution terms that you use for the rest of that
+dnl program.
+
+dnl PKG_PREREQ(MIN-VERSION)
+dnl -----------------------
+dnl Since: 0.29
+dnl
+dnl Verify that the version of the pkg-config macros are at least
+dnl MIN-VERSION. Unlike PKG_PROG_PKG_CONFIG, which checks the user's
+dnl installed version of pkg-config, this checks the developer's version
+dnl of pkg.m4 when generating configure.
+dnl
+dnl To ensure that this macro is defined, also add:
+dnl m4_ifndef([PKG_PREREQ],
+dnl [m4_fatal([must install pkg-config 0.29 or later before running autoconf/autogen])])
+dnl
+dnl See the "Since" comment for each macro you use to see what version
+dnl of the macros you require.
+m4_defun([PKG_PREREQ],
+[m4_define([PKG_MACROS_VERSION], [0.29])
+m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1,
+ [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])])
+])dnl PKG_PREREQ
+
+dnl PKG_PROG_PKG_CONFIG([MIN-VERSION])
+dnl ----------------------------------
+dnl Since: 0.16
+dnl
+dnl Search for the pkg-config tool and set the PKG_CONFIG variable to
+dnl first found in the path. Checks that the version of pkg-config found
+dnl is at least MIN-VERSION. If MIN-VERSION is not specified, 0.9.0 is
+dnl used since that's the first version where most current features of
+dnl pkg-config existed.
AC_DEFUN([PKG_PROG_PKG_CONFIG],
[m4_pattern_forbid([^_?PKG_[A-Z_]+$])
m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
@@ -374,18 +405,19 @@
PKG_CONFIG=""
fi
fi[]dnl
-])# PKG_PROG_PKG_CONFIG
+])dnl PKG_PROG_PKG_CONFIG
-# PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
-#
-# Check to see whether a particular set of modules exists. Similar
-# to PKG_CHECK_MODULES(), but does not set variables or print errors.
-#
-# Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-# only at the first occurence in configure.ac, so if the first place
-# it's called might be skipped (such as if it is within an "if", you
-# have to call PKG_CHECK_EXISTS manually
-# --------------------------------------------------------------
+dnl PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
+dnl -------------------------------------------------------------------
+dnl Since: 0.18
+dnl
+dnl Check to see whether a particular set of modules exists. Similar to
+dnl PKG_CHECK_MODULES(), but does not set variables or print errors.
+dnl
+dnl Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG])
+dnl only at the first occurence in configure.ac, so if the first place
+dnl it's called might be skipped (such as if it is within an "if", you
+dnl have to call PKG_CHECK_EXISTS manually
AC_DEFUN([PKG_CHECK_EXISTS],
[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
if test -n "$PKG_CONFIG" && \
@@ -395,8 +427,10 @@
$3])dnl
fi])
-# _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES])
-# ---------------------------------------------
+dnl _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES])
+dnl ---------------------------------------------
+dnl Internal wrapper calling pkg-config via PKG_CONFIG and setting
+dnl pkg_failed based on the result.
m4_define([_PKG_CONFIG],
[if test -n "$$1"; then
pkg_cv_[]$1="$$1"
@@ -408,10 +442,11 @@
else
pkg_failed=untried
fi[]dnl
-])# _PKG_CONFIG
+])dnl _PKG_CONFIG
-# _PKG_SHORT_ERRORS_SUPPORTED
-# -----------------------------
+dnl _PKG_SHORT_ERRORS_SUPPORTED
+dnl ---------------------------
+dnl Internal check to see if pkg-config supports short errors.
AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED],
[AC_REQUIRE([PKG_PROG_PKG_CONFIG])
if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
@@ -419,19 +454,17 @@
else
_pkg_short_errors_supported=no
fi[]dnl
-])# _PKG_SHORT_ERRORS_SUPPORTED
+])dnl _PKG_SHORT_ERRORS_SUPPORTED
-# PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
-# [ACTION-IF-NOT-FOUND])
-#
-#
-# Note that if there is a possibility the first call to
-# PKG_CHECK_MODULES might not happen, you should be sure to include an
-# explicit call to PKG_PROG_PKG_CONFIG in your configure.ac
-#
-#
-# --------------------------------------------------------------
+dnl PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
+dnl [ACTION-IF-NOT-FOUND])
+dnl --------------------------------------------------------------
+dnl Since: 0.4.0
+dnl
+dnl Note that if there is a possibility the first call to
+dnl PKG_CHECK_MODULES might not happen, you should be sure to include an
+dnl explicit call to PKG_PROG_PKG_CONFIG in your configure.ac
AC_DEFUN([PKG_CHECK_MODULES],
[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl
@@ -485,16 +518,40 @@
AC_MSG_RESULT([yes])
$3
fi[]dnl
-])# PKG_CHECK_MODULES
+])dnl PKG_CHECK_MODULES
+
+
+dnl PKG_CHECK_MODULES_STATIC(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
+dnl [ACTION-IF-NOT-FOUND])
+dnl ---------------------------------------------------------------------
+dnl Since: 0.29
+dnl
+dnl Checks for existence of MODULES and gathers its build flags with
+dnl static libraries enabled. Sets VARIABLE-PREFIX_CFLAGS from --cflags
+dnl and VARIABLE-PREFIX_LIBS from --libs.
+dnl
+dnl Note that if there is a possibility the first call to
+dnl PKG_CHECK_MODULES_STATIC might not happen, you should be sure to
+dnl include an explicit call to PKG_PROG_PKG_CONFIG in your
+dnl configure.ac.
+AC_DEFUN([PKG_CHECK_MODULES_STATIC],
+[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
+_save_PKG_CONFIG=$PKG_CONFIG
+PKG_CONFIG="$PKG_CONFIG --static"
+PKG_CHECK_MODULES($@)
+PKG_CONFIG=$_save_PKG_CONFIG[]dnl
+])dnl PKG_CHECK_MODULES_STATIC
-# PKG_INSTALLDIR(DIRECTORY)
-# -------------------------
-# Substitutes the variable pkgconfigdir as the location where a module
-# should install pkg-config .pc files. By default the directory is
-# $libdir/pkgconfig, but the default can be changed by passing
-# DIRECTORY. The user can override through the --with-pkgconfigdir
-# parameter.
+dnl PKG_INSTALLDIR([DIRECTORY])
+dnl -------------------------
+dnl Since: 0.27
+dnl
+dnl Substitutes the variable pkgconfigdir as the location where a module
+dnl should install pkg-config .pc files. By default the directory is
+dnl $libdir/pkgconfig, but the default can be changed by passing
+dnl DIRECTORY. The user can override through the --with-pkgconfigdir
+dnl parameter.
AC_DEFUN([PKG_INSTALLDIR],
[m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])])
m4_pushdef([pkg_description],
@@ -505,16 +562,18 @@
AC_SUBST([pkgconfigdir], [$with_pkgconfigdir])
m4_popdef([pkg_default])
m4_popdef([pkg_description])
-]) dnl PKG_INSTALLDIR
+])dnl PKG_INSTALLDIR
-# PKG_NOARCH_INSTALLDIR(DIRECTORY)
-# -------------------------
-# Substitutes the variable noarch_pkgconfigdir as the location where a
-# module should install arch-independent pkg-config .pc files. By
-# default the directory is $datadir/pkgconfig, but the default can be
-# changed by passing DIRECTORY. The user can override through the
-# --with-noarch-pkgconfigdir parameter.
+dnl PKG_NOARCH_INSTALLDIR([DIRECTORY])
+dnl --------------------------------
+dnl Since: 0.27
+dnl
+dnl Substitutes the variable noarch_pkgconfigdir as the location where a
+dnl module should install arch-independent pkg-config .pc files. By
+dnl default the directory is $datadir/pkgconfig, but the default can be
+dnl changed by passing DIRECTORY. The user can override through the
+dnl --with-noarch-pkgconfigdir parameter.
AC_DEFUN([PKG_NOARCH_INSTALLDIR],
[m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])])
m4_pushdef([pkg_description],
@@ -525,13 +584,15 @@
AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir])
m4_popdef([pkg_default])
m4_popdef([pkg_description])
-]) dnl PKG_NOARCH_INSTALLDIR
+])dnl PKG_NOARCH_INSTALLDIR
-# PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE,
-# [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
-# -------------------------------------------
-# Retrieves the value of the pkg-config variable for the given module.
+dnl PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE,
+dnl [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
+dnl -------------------------------------------
+dnl Since: 0.28
+dnl
+dnl Retrieves the value of the pkg-config variable for the given module.
AC_DEFUN([PKG_CHECK_VAR],
[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl
@@ -540,10 +601,10 @@
AS_VAR_COPY([$1], [pkg_cv_][$1])
AS_VAR_IF([$1], [""], [$5], [$4])dnl
-])# PKG_CHECK_VAR
+])dnl PKG_CHECK_VAR
# po.m4 serial 24 (gettext-0.19)
-dnl Copyright (C) 1995-2014 Free Software Foundation, Inc.
+dnl Copyright (C) 1995-2014, 2016 Free Software Foundation, Inc.
dnl This file is free software; the Free Software Foundation
dnl gives unlimited permission to copy and/or distribute it,
dnl with or without modifications, as long as this notice is preserved.
@@ -997,7 +1058,7 @@
])
# progtest.m4 serial 7 (gettext-0.18.2)
-dnl Copyright (C) 1996-2003, 2005, 2008-2015 Free Software Foundation, Inc.
+dnl Copyright (C) 1996-2003, 2005, 2008-2016 Free Software Foundation, Inc.
dnl This file is free software; the Free Software Foundation
dnl gives unlimited permission to copy and/or distribute it,
dnl with or without modifications, as long as this notice is preserved.
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/config/Makefile.am new/firewalld-0.4.3.2/config/Makefile.am
--- old/firewalld-0.4.3.1/config/Makefile.am 2016-04-26 14:58:41.000000000 +0200
+++ new/firewalld-0.4.3.2/config/Makefile.am 2016-07-05 15:50:25.000000000 +0200
@@ -130,6 +130,7 @@
services/ptp.xml \
services/pulseaudio.xml \
services/puppetmaster.xml \
+ services/RH-Satellite-6.xml \
services/radius.xml \
services/rpc-bind.xml \
services/rsyncd.xml \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/config/Makefile.in new/firewalld-0.4.3.2/config/Makefile.in
--- old/firewalld-0.4.3.1/config/Makefile.in 2016-06-28 14:18:36.000000000 +0200
+++ new/firewalld-0.4.3.2/config/Makefile.in 2016-07-05 15:50:30.000000000 +0200
@@ -410,6 +410,7 @@
services/ptp.xml \
services/pulseaudio.xml \
services/puppetmaster.xml \
+ services/RH-Satellite-6.xml \
services/radius.xml \
services/rpc-bind.xml \
services/rsyncd.xml \
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/config/services/RH-Satellite-6.xml new/firewalld-0.4.3.2/config/services/RH-Satellite-6.xml
--- old/firewalld-0.4.3.1/config/services/RH-Satellite-6.xml 1970-01-01 01:00:00.000000000 +0100
+++ new/firewalld-0.4.3.2/config/services/RH-Satellite-6.xml 2016-07-05 15:45:57.000000000 +0200
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<service>
+ <short>Red Hat Satellite 6</short>
+ <description>Red Hat Satellite 6 is a systems management server that can be used to configure new systems, subscribe to updates, and maintain installations in distributed environments.</description>
+ <port protocol="tcp" port="80"/>
+ <port protocol="tcp" port="443"/>
+ <port protocol="tcp" port="5646-5647"/>
+ <port protocol="tcp" port="5671"/>
+ <port protocol="tcp" port="8140"/>
+ <port protocol="tcp" port="8080"/>
+ <port protocol="tcp" port="9090"/>
+</service>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/configure new/firewalld-0.4.3.2/configure
--- old/firewalld-0.4.3.1/configure 2016-06-28 14:18:35.000000000 +0200
+++ new/firewalld-0.4.3.2/configure 2016-07-04 17:10:16.000000000 +0200
@@ -1,6 +1,6 @@
#! /bin/sh
# Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.69 for firewalld 0.4.3.1.
+# Generated by GNU Autoconf 2.69 for firewalld 0.4.3.2.
#
#
# Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc.
@@ -577,8 +577,8 @@
# Identity of this package.
PACKAGE_NAME='firewalld'
PACKAGE_TARNAME='firewalld'
-PACKAGE_VERSION='0.4.3.1'
-PACKAGE_STRING='firewalld 0.4.3.1'
+PACKAGE_VERSION='0.4.3.2'
+PACKAGE_STRING='firewalld 0.4.3.2'
PACKAGE_BUGREPORT=''
PACKAGE_URL=''
@@ -1299,7 +1299,7 @@
# Omit some internal or obsolete options to make the list less imposing.
# This message is too long to be a string in the A/UX 3.1 sh.
cat <<_ACEOF
-\`configure' configures firewalld 0.4.3.1 to adapt to many kinds of systems.
+\`configure' configures firewalld 0.4.3.2 to adapt to many kinds of systems.
Usage: $0 [OPTION]... [VAR=VALUE]...
@@ -1365,7 +1365,7 @@
if test -n "$ac_init_help"; then
case $ac_init_help in
- short | recursive ) echo "Configuration of firewalld 0.4.3.1:";;
+ short | recursive ) echo "Configuration of firewalld 0.4.3.2:";;
esac
cat <<\_ACEOF
@@ -1471,7 +1471,7 @@
test -n "$ac_init_help" && exit $ac_status
if $ac_init_version; then
cat <<\_ACEOF
-firewalld configure 0.4.3.1
+firewalld configure 0.4.3.2
generated by GNU Autoconf 2.69
Copyright (C) 2012 Free Software Foundation, Inc.
@@ -1488,7 +1488,7 @@
This file contains any messages produced by compilers while
running configure, to aid debugging if configure makes a mistake.
-It was created by firewalld $as_me 0.4.3.1, which was
+It was created by firewalld $as_me 0.4.3.2, which was
generated by GNU Autoconf 2.69. Invocation command line was
$ $0 $@
@@ -2354,7 +2354,7 @@
# Define the identity of the package.
PACKAGE='firewalld'
- VERSION='0.4.3.1'
+ VERSION='0.4.3.2'
# Some tools Automake needs.
@@ -2561,7 +2561,7 @@
#define PACKAGE_RELEASE "$PACKAGE_RELEASE"
_ACEOF
-PACKAGE_TAG='v0.4.3.1'
+PACKAGE_TAG='v0.4.3.2'
cat >>confdefs.h <<_ACEOF
#define PACKAGE_TAG "$PACKAGE_TAG"
@@ -5169,7 +5169,7 @@
# report actual input values of CONFIG_FILES etc. instead of their
# values after options handling.
ac_log="
-This file was extended by firewalld $as_me 0.4.3.1, which was
+This file was extended by firewalld $as_me 0.4.3.2, which was
generated by GNU Autoconf 2.69. Invocation command line was
CONFIG_FILES = $CONFIG_FILES
@@ -5226,7 +5226,7 @@
cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`"
ac_cs_version="\\
-firewalld config.status 0.4.3.1
+firewalld config.status 0.4.3.2
configured by $0, generated by GNU Autoconf 2.69,
with options \\"\$ac_cs_config\\"
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-applet.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-applet.1
--- old/firewalld-0.4.3.1/doc/man/man1/firewall-applet.1 2016-06-28 14:23:42.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man1/firewall-applet.1 2016-07-05 15:51:44.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewall-applet
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALL\-APPLET" "1" "" "firewalld 0.4.3.1" "firewall-applet"
+.TH "FIREWALL\-APPLET" "1" "" "firewalld 0.4.3.2" "firewall-applet"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-cmd.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-cmd.1
--- old/firewalld-0.4.3.1/doc/man/man1/firewall-cmd.1 2016-06-28 16:48:48.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man1/firewall-cmd.1 2016-07-05 15:54:08.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewall-cmd
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALL\-CMD" "1" "" "firewalld 0.4.3.1" "firewall-cmd"
+.TH "FIREWALL\-CMD" "1" "" "firewalld 0.4.3.2" "firewall-cmd"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-config.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-config.1
--- old/firewalld-0.4.3.1/doc/man/man1/firewall-config.1 2016-06-28 14:23:43.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man1/firewall-config.1 2016-07-05 15:51:44.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewall-config
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALL\-CONFIG" "1" "" "firewalld 0.4.3.1" "firewall-config"
+.TH "FIREWALL\-CONFIG" "1" "" "firewalld 0.4.3.2" "firewall-config"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-offline-cmd.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-offline-cmd.1
--- old/firewalld-0.4.3.1/doc/man/man1/firewall-offline-cmd.1 2016-06-28 14:23:44.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man1/firewall-offline-cmd.1 2016-07-05 15:51:45.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewall-offline-cmd
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALL\-OFFLINE\-C" "1" "" "firewalld 0.4.3.1" "firewall-offline-cmd"
+.TH "FIREWALL\-OFFLINE\-C" "1" "" "firewalld 0.4.3.2" "firewall-offline-cmd"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewallctl.1 new/firewalld-0.4.3.2/doc/man/man1/firewallctl.1
--- old/firewalld-0.4.3.1/doc/man/man1/firewallctl.1 2016-06-28 14:23:43.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man1/firewallctl.1 2016-07-05 15:51:45.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewallctl
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLCTL" "1" "" "firewalld 0.4.3.1" "firewallctl"
+.TH "FIREWALLCTL" "1" "" "firewalld 0.4.3.2" "firewallctl"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewalld.1 new/firewalld-0.4.3.2/doc/man/man1/firewalld.1
--- old/firewalld-0.4.3.1/doc/man/man1/firewalld.1 2016-06-28 14:23:43.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man1/firewalld.1 2016-07-05 15:51:45.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD" "1" "" "firewalld 0.4.3.1" "firewalld"
+.TH "FIREWALLD" "1" "" "firewalld 0.4.3.2" "firewalld"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.conf.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.conf.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.conf.5 2016-06-28 14:23:44.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.conf.5 2016-07-05 15:51:45.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.conf
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.CONF" "5" "" "firewalld 0.4.3.1" "firewalld.conf"
+.TH "FIREWALLD\&.CONF" "5" "" "firewalld 0.4.3.2" "firewalld.conf"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.dbus.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.dbus.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.dbus.5 2016-06-28 14:23:45.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.dbus.5 2016-07-05 15:51:46.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.dbus
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.DBUS" "5" "" "firewalld 0.4.3.1" "firewalld.dbus"
+.TH "FIREWALLD\&.DBUS" "5" "" "firewalld 0.4.3.2" "firewalld.dbus"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.direct.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.direct.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.direct.5 2016-06-28 14:23:45.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.direct.5 2016-07-05 15:51:46.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.direct
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.DIRECT" "5" "" "firewalld 0.4.3.1" "firewalld.direct"
+.TH "FIREWALLD\&.DIRECT" "5" "" "firewalld 0.4.3.2" "firewalld.direct"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.icmptype.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.icmptype.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.icmptype.5 2016-06-28 14:23:45.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.icmptype.5 2016-07-05 15:51:47.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.icmptype
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.ICMPTYPE" "5" "" "firewalld 0.4.3.1" "firewalld.icmptype"
+.TH "FIREWALLD\&.ICMPTYPE" "5" "" "firewalld 0.4.3.2" "firewalld.icmptype"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.ipset.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.ipset.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.ipset.5 2016-06-28 14:23:45.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.ipset.5 2016-07-05 15:51:47.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.ipset
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.IPSET" "5" "" "firewalld 0.4.3.1" "firewalld.ipset"
+.TH "FIREWALLD\&.IPSET" "5" "" "firewalld 0.4.3.2" "firewalld.ipset"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.lockdown-whitelist.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.lockdown-whitelist.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.lockdown-whitelist.5 2016-06-28 14:23:46.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.lockdown-whitelist.5 2016-07-05 15:51:47.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.lockdown-whitelist
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.LOCKDOWN" "5" "" "firewalld 0.4.3.1" "firewalld.lockdown-whitelist"
+.TH "FIREWALLD\&.LOCKDOWN" "5" "" "firewalld 0.4.3.2" "firewalld.lockdown-whitelist"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.richlanguage.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.richlanguage.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.richlanguage.5 2016-06-28 14:23:46.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.richlanguage.5 2016-07-05 15:51:47.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.richlanguage
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.RICHLANG" "5" "" "firewalld 0.4.3.1" "firewalld.richlanguage"
+.TH "FIREWALLD\&.RICHLANG" "5" "" "firewalld 0.4.3.2" "firewalld.richlanguage"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.service.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.service.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.service.5 2016-06-28 14:23:46.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.service.5 2016-07-05 15:51:48.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.service
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.SERVICE" "5" "" "firewalld 0.4.3.1" "firewalld.service"
+.TH "FIREWALLD\&.SERVICE" "5" "" "firewalld 0.4.3.2" "firewalld.service"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.zone.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.zone.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.zone.5 2016-06-28 14:23:46.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.zone.5 2016-07-05 15:51:48.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.zone
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.ZONE" "5" "" "firewalld 0.4.3.1" "firewalld.zone"
+.TH "FIREWALLD\&.ZONE" "5" "" "firewalld 0.4.3.2" "firewalld.zone"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.zones.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.zones.5
--- old/firewalld-0.4.3.1/doc/man/man5/firewalld.zones.5 2016-06-28 14:23:47.000000000 +0200
+++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.zones.5 2016-07-05 15:51:48.000000000 +0200
@@ -4,10 +4,10 @@
.\" Generator: DocBook XSL Stylesheets v1.78.1 http://docbook.sf.net/
.\" Date:
.\" Manual: firewalld.zones
-.\" Source: firewalld 0.4.3.1
+.\" Source: firewalld 0.4.3.2
.\" Language: English
.\"
-.TH "FIREWALLD\&.ZONES" "5" "" "firewalld 0.4.3.1" "firewalld.zones"
+.TH "FIREWALLD\&.ZONES" "5" "" "firewalld 0.4.3.2" "firewalld.zones"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/firewalld.spec new/firewalld-0.4.3.2/firewalld.spec
--- old/firewalld-0.4.3.1/firewalld.spec 2016-06-28 14:18:12.000000000 +0200
+++ new/firewalld-0.4.3.2/firewalld.spec 2016-07-05 15:48:33.000000000 +0200
@@ -7,7 +7,7 @@
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
Name: firewalld
-Version: 0.4.3.1
+Version: 0.4.3.2
Release: 1%{?dist}
URL: http://www.firewalld.org
License: GPLv2+
@@ -300,6 +300,13 @@
%{_mandir}/man1/firewall-config*.1*
%changelog
+* Mon Jul 4 2016 Thomas Woerner - 0.4.3.2-1
+- Fix regression with unavailable optional commands
+- All missing backend messages should be warnings
+- Individual calls for missing restore commands
+- Only one authenticate call for add and remove options and also sequences
+- New service RH-Satellite-6
+
* Tue Jun 28 2016 Thomas Woerner - 0.4.3.1-1
- firewall.command: Fix python3 DBusException message not interable error
- src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/command.py new/firewalld-0.4.3.2/src/firewall/command.py
--- old/firewalld-0.4.3.1/src/firewall/command.py 2016-06-28 13:55:22.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewall/command.py 2016-07-05 15:32:20.000000000 +0200
@@ -36,6 +36,10 @@
self.quiet = quiet
self.verbose = verbose
self.__use_exception_handler = True
+ self.fw = None
+
+ def set_fw(self, fw):
+ self.fw = fw
def set_quiet(self, flag):
self.quiet = flag
@@ -83,6 +87,8 @@
"add": "ALREADY_ENABLED",
"remove": "NOT_ENABLED",
}
+ if self.fw is not None:
+ self.fw.authorizeAll()
items = [ ]
_errors = 0
for item in option:
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/config/__init__.py new/firewalld-0.4.3.2/src/firewall/config/__init__.py
--- old/firewalld-0.4.3.1/src/firewall/config/__init__.py 2016-06-28 14:18:37.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewall/config/__init__.py 2016-07-04 17:10:17.000000000 +0200
@@ -42,7 +42,7 @@
DATADIR = '/usr/share/' + DAEMON_NAME
CONFIG_GLADE_NAME = CONFIG_NAME + '.glade'
COPYRIGHT = '(C) 2010-2016 Red Hat, Inc.'
-VERSION = '0.4.3.1'
+VERSION = '0.4.3.2'
AUTHORS = [
"Thomas Woerner ",
"Jiri Popelka ",
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/ebtables.py new/firewalld-0.4.3.2/src/firewall/core/ebtables.py
--- old/firewalld-0.4.3.1/src/firewall/core/ebtables.py 2016-05-27 11:16:12.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewall/core/ebtables.py 2016-07-04 15:03:02.000000000 +0200
@@ -59,6 +59,11 @@
self.restore_noflush_option = self._detect_restore_noflush_option()
self.concurrent_option = self._detect_concurrent_option()
self.__remove_dangling_lock()
+ self.fill_exists()
+
+ def fill_exists(self):
+ self.command_exists = os.path.exists(self._command)
+ self.restore_command_exists = os.path.exists(self._restore_command)
def __remove_dangling_lock(self):
if os.path.exists(self.ebtables_lock):
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/fw.py new/firewalld-0.4.3.2/src/firewall/core/fw.py
--- old/firewalld-0.4.3.1/src/firewall/core/fw.py 2016-05-25 17:23:35.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewall/core/fw.py 2016-07-04 15:03:02.000000000 +0200
@@ -123,7 +123,7 @@
if self.ebtables_enabled and \
"filter" not in self.get_available_tables("eb"):
- log.error("ebtables not usable, disabling ethernet bridge firewall.")
+ log.warning("ebtables not usable, disabling ethernet bridge firewall.")
self.ebtables_enabled = False
# is there at least support for ipv4 or ipv6
@@ -135,7 +135,7 @@
try:
self.ipset_backend.list()
except ValueError:
- log.error("ipset not usable, disabling ipset usage in firewall.")
+ log.warning("ipset not usable, disabling ipset usage in firewall.")
# ipset is not usable, no supported types
self.ipset_enabled = False
self.ipset_supported_types = [ ]
@@ -143,6 +143,41 @@
# ipset is usable, get all supported types
self.ipset_supported_types = self.ipset_backend.supported_types()
+ self.ip4tables_backend.fill_exists()
+ if not self.ip4tables_backend.restore_command_exists:
+ if self.ip4tables_backend.command_exists:
+ log.warning("iptables-restore is missing, using "
+ "individual calls for IPv4 firewall.")
+ else:
+ log.warning("iptables-restore and iptables are missing, "
+ "disabling IPv4 firewall.")
+ self.ip4tables_enabled = False
+
+ self.ip6tables_backend.fill_exists()
+ if not self.ip6tables_backend.restore_command_exists:
+ if self.ip6tables_backend.command_exists:
+ log.warning("ip6tables-restore is missing, using "
+ "individual calls for IPv6 firewall.")
+ else:
+ log.warning("ip6tables-restore and ip6tables are missing, "
+ "disabling IPv6 firewall.")
+ self.ip6tables_enabled = False
+
+ self.ebtables_backend.fill_exists()
+ if not self.ebtables_backend.restore_command_exists:
+ if self.ebtables_backend.command_exists:
+ log.warning("ebtables-restore is missing, using "
+ "individual calls for bridge firewall.")
+ else:
+ log.warning("ebtables-restore and ebtables are missing, "
+ "disabling bridge firewall.")
+ self.ebtables_enabled = False
+
+ if self.ebtables_enabled and not self._individual_calls and \
+ not self.ebtables_backend.restore_noflush_option:
+ log.debug1("ebtables-restore is not supporting the --noflush "
+ "option, will therefore not be used")
+
def _start(self, reload=False, complete_reload=False):
# initialize firewall
default_zone = config.FALLBACK_ZONE
@@ -201,10 +236,6 @@
self._log_denied = value.lower()
log.debug1("LogDenied is set to '%s'", self._log_denied)
- if self.ebtables_enabled and not self._individual_calls and \
- not self.ebtables_backend.restore_noflush_option:
- log.debug1("ebtables-restore is not supporting the --noflush option, will therefore not be used")
-
self.config.set_firewalld_conf(copy.deepcopy(self._firewalld_conf))
self._start_check()
@@ -814,6 +845,7 @@
return ""
if self._individual_calls or \
+ not backend.restore_command_exists or \
(ipv == "eb" and not self.ebtables_backend.restore_noflush_option):
for i,rule in enumerate(_rules):
# remove leading and trailing '"' for use with execve
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/ipXtables.py new/firewalld-0.4.3.2/src/firewall/core/ipXtables.py
--- old/firewalld-0.4.3.1/src/firewall/core/ipXtables.py 2016-06-23 17:16:55.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewall/core/ipXtables.py 2016-07-04 15:03:02.000000000 +0200
@@ -150,6 +150,11 @@
self._command = config.COMMANDS[self.ipv]
self._restore_command = config.COMMANDS["%s-restore" % self.ipv]
self.wait_option = self._detect_wait_option()
+ self.fill_exists()
+
+ def fill_exists(self):
+ self.command_exists = os.path.exists(self._command)
+ self.restore_command_exists = os.path.exists(self._restore_command)
def __run(self, args):
# convert to string list
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/prog.py new/firewalld-0.4.3.2/src/firewall/core/prog.py
--- old/firewalld-0.4.3.1/src/firewall/core/prog.py 2016-06-27 18:22:36.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewall/core/prog.py 2016-07-04 15:02:58.000000000 +0200
@@ -37,9 +37,13 @@
input_string = handle.read().encode()
env = {'LANG': 'C'}
- process = subprocess.Popen(args, stdin=subprocess.PIPE,
- stdout=subprocess.PIPE, close_fds=True,
- env=env)
+ try:
+ process = subprocess.Popen(args, stdin=subprocess.PIPE,
+ stdout=subprocess.PIPE, close_fds=True,
+ env=env)
+ except OSError:
+ return (255, '')
+
(output, _) = process.communicate(input_string)
if output is not None:
output = output.decode('utf-8', 'replace')
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall-cmd new/firewalld-0.4.3.2/src/firewall-cmd
--- old/firewalld-0.4.3.1/src/firewall-cmd 2016-06-22 14:32:00.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewall-cmd 2016-07-04 15:41:25.000000000 +0200
@@ -917,6 +917,7 @@
cmd.print_and_exit ("not running", errors.NOT_RUNNING)
else:
cmd.print_and_exit ("FirewallD is not running", errors.NOT_RUNNING)
+cmd.set_fw(fw)
if options_zone_ops and not zone and not (a.service and options_service):
default = fw.getDefaultZone()
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewallctl new/firewalld-0.4.3.2/src/firewallctl
--- old/firewalld-0.4.3.1/src/firewallctl 2016-06-28 13:55:22.000000000 +0200
+++ new/firewalld-0.4.3.2/src/firewallctl 2016-07-04 15:41:35.000000000 +0200
@@ -1720,6 +1720,7 @@
cmd.print_and_exit("not running", errors.NOT_RUNNING)
else:
cmd.print_and_exit("FirewallD is not running", errors.NOT_RUNNING)
+cmd.set_fw(fw)
# version
if args.parser == "version":