- Remove unnecessary explicit kernel dep (#146142)
- Fixed out of bounds accesses (#131848): Thanks to Steve Grubb for the
    patch
- Adapted iptables-config to reference to modprobe.conf (#150143)
- Remove misleading message (#140154): Thanks to Ulrich Drepper for the
    patch
This commit is contained in:
Thomas Woerner 2005-03-18 16:40:36 +00:00
parent fe748ba4bd
commit 62b5948287
3 changed files with 25 additions and 4 deletions

View File

@ -0,0 +1,11 @@
--- iptables-1.3.0/iptables.c.no_root 2005-03-18 17:29:57.109501987 +0100
+++ iptables-1.3.0/iptables.c 2005-03-18 17:29:58.321405982 +0100
@@ -2300,7 +2300,7 @@
*handle = iptc_init(*table);
if (!*handle)
- exit_error(VERSION_PROBLEM,
+ exit_error(errno == EPERM ? OTHER_PROBLEM : VERSION_PROBLEM,
"can't initialize iptables table `%s': %s",
*table, iptc_strerror(errno));

View File

@ -2,7 +2,7 @@
# Default: -none- # Default: -none-
# Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which # Space separated list of nat helpers (e.g. 'ip_nat_ftp ip_nat_irc'), which
# are loaded after the firewall rules are applied. Options for the helpers are # are loaded after the firewall rules are applied. Options for the helpers are
# stored in /etc/modules.conf. # stored in /etc/modprobe.conf.
IPTABLES_MODULES="" IPTABLES_MODULES=""
# Unload modules on restart and stop # Unload modules on restart and stop

View File

@ -4,7 +4,7 @@
Name: iptables Name: iptables
Summary: Tools for managing Linux kernel packet filtering capabilities. Summary: Tools for managing Linux kernel packet filtering capabilities.
Version: 1.3.0 Version: 1.3.0
Release: 1 Release: 2
Source: http://www.netfilter.org/%{name}-%{version}.tar.bz2 Source: http://www.netfilter.org/%{name}-%{version}.tar.bz2
Source1: iptables.init Source1: iptables.init
Source2: iptables-config Source2: iptables-config
@ -15,14 +15,15 @@ Patch2: iptables-1.2.8-nolibnsl.patch
Patch4: iptables-1.2.9-netlink.patch Patch4: iptables-1.2.9-netlink.patch
Patch5: iptables-1.3.0-selinux.patch Patch5: iptables-1.3.0-selinux.patch
Patch6: iptables-1.2.10-counters.patch Patch6: iptables-1.2.10-counters.patch
Patch8: iptables-1.2.11-cleanup.patch Patch8: iptables-1.3.0-cleanup.patch
Patch9: iptables-1.3.0-autoload.patch Patch9: iptables-1.3.0-autoload.patch
Patch10: iptables-1.3.0-no_root.patch
Group: System Environment/Base Group: System Environment/Base
URL: http://www.netfilter.org/ URL: http://www.netfilter.org/
BuildRoot: %{_tmppath}/%{name}-buildroot BuildRoot: %{_tmppath}/%{name}-buildroot
License: GPL License: GPL
BuildPrereq: /usr/bin/perl BuildPrereq: /usr/bin/perl
Requires: kernel >= 2.4.20 Conflicts: kernel < 2.4.20
Requires(post,postun): chkconfig Requires(post,postun): chkconfig
Prefix: %{_prefix} Prefix: %{_prefix}
@ -74,6 +75,7 @@ cd ..
%patch6 -p1 -b .counters %patch6 -p1 -b .counters
%patch8 -p1 -b .cleanup %patch8 -p1 -b .cleanup
%patch9 -p1 -b .autoload %patch9 -p1 -b .autoload
%patch10 -p1 -b .no_root
# Put it to a reasonable place # Put it to a reasonable place
find . -type f -exec perl -pi -e "s,/usr/local,%{prefix},g" {} \; find . -type f -exec perl -pi -e "s,/usr/local,%{prefix},g" {} \;
@ -148,6 +150,14 @@ fi
%endif %endif
%changelog %changelog
* Fri Mar 18 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-2
- Remove unnecessary explicit kernel dep (#146142)
- Fixed out of bounds accesses (#131848): Thanks to Steve Grubb
for the patch
- Adapted iptables-config to reference to modprobe.conf (#150143)
- Remove misleading message (#140154): Thanks to Ulrich Drepper
for the patch
* Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1 * Mon Feb 21 2005 Thomas Woerner <twoerner@redhat.com> 1.3.0-1
- new version 1.3.0 - new version 1.3.0