chmod /etc/sysconfig/ip[6]tables 755 -> 600

This commit is contained in:
Jiri Popelka 2014-01-14 16:59:53 +01:00
parent d94a3dd4be
commit e3b3aa4924

View File

@ -7,7 +7,7 @@
Name: iptables Name: iptables
Summary: Tools for managing Linux kernel packet filtering capabilities Summary: Tools for managing Linux kernel packet filtering capabilities
Version: 1.4.21 Version: 1.4.21
Release: 4%{?dist} Release: 5%{?dist}
Source: http://www.netfilter.org/projects/iptables/files/%{name}-%{version}.tar.bz2 Source: http://www.netfilter.org/projects/iptables/files/%{name}-%{version}.tar.bz2
Source1: iptables.init Source1: iptables.init
Source2: iptables-config Source2: iptables-config
@ -109,8 +109,8 @@ install -d -m 755 %{buildroot}%{_sysconfdir}/sysconfig
install -c -m 600 %{SOURCE2} %{buildroot}%{_sysconfdir}/sysconfig/iptables-config install -c -m 600 %{SOURCE2} %{buildroot}%{_sysconfdir}/sysconfig/iptables-config
sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE2} > ip6tables-config sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE2} > ip6tables-config
install -c -m 600 ip6tables-config %{buildroot}%{_sysconfdir}/sysconfig/ip6tables-config install -c -m 600 ip6tables-config %{buildroot}%{_sysconfdir}/sysconfig/ip6tables-config
install -c -m 755 %{SOURCE5} %{buildroot}%{_sysconfdir}/sysconfig/iptables install -c -m 600 %{SOURCE5} %{buildroot}%{_sysconfdir}/sysconfig/iptables
install -c -m 755 %{SOURCE6} %{buildroot}%{_sysconfdir}/sysconfig/ip6tables install -c -m 600 %{SOURCE6} %{buildroot}%{_sysconfdir}/sysconfig/ip6tables
# install systemd service files # install systemd service files
install -d -m 755 %{buildroot}/%{_unitdir} install -d -m 755 %{buildroot}/%{_unitdir}
@ -174,11 +174,11 @@ install -c -m 755 ip6tabes.save-legacy %{buildroot}/%{legacy_actions}/ip6tables/
%{_libdir}/pkgconfig/xtables.pc %{_libdir}/pkgconfig/xtables.pc
%files services %files services
%dir %{script_path}
%attr(0755,root,root) %{script_path}/iptables.init %attr(0755,root,root) %{script_path}/iptables.init
%attr(0755,root,root) %{script_path}/ip6tables.init %attr(0755,root,root) %{script_path}/ip6tables.init
%config(noreplace) %{_sysconfdir}/sysconfig/iptables %config(noreplace) %attr(0600,root,root) %{_sysconfdir}/sysconfig/iptables
%config(noreplace) %{_sysconfdir}/sysconfig/ip6tables %config(noreplace) %attr(0600,root,root) %{_sysconfdir}/sysconfig/ip6tables
%dir %{script_path}
%{_unitdir}/iptables.service %{_unitdir}/iptables.service
%{_unitdir}/ip6tables.service %{_unitdir}/ip6tables.service
%dir %{legacy_actions}/iptables %dir %{legacy_actions}/iptables
@ -193,6 +193,9 @@ install -c -m 755 ip6tabes.save-legacy %{buildroot}/%{legacy_actions}/ip6tables/
%changelog %changelog
* Tue Jan 14 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-5
- chmod /etc/sysconfig/ip[6]tables 755 -> 600
* Fri Jan 10 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-4 * Fri Jan 10 2014 Jiri Popelka <jpopelka@redhat.com> - 1.4.21-4
- drop virtual provide for xtables.so.9 - drop virtual provide for xtables.so.9
- add default /etc/sysconfig/ip[6]tables (RHBZ#1034494) - add default /etc/sysconfig/ip[6]tables (RHBZ#1034494)