Commit Graph

43 Commits

Author SHA1 Message Date
Phil Sutter
979b61fb74 iptables-1.8.8-6.el9
- Add expected testsuite result

Related: rhbz#2136584
2022-12-16 21:34:22 +01:00
Phil Sutter
de14b081d8 iptables-1.8.8-5.el9
- nft: un-break among match with concatenation
- nft: fix ebtables among match when mac+ip addresses are used

Resolves: rhbz#2136584
2022-12-06 17:38:06 +01:00
Phil Sutter
3c61c034bd iptables-1.8.8-4.el9
- libxtables: Fix unsupported extension warning corner case

Resolves: rhbz#2103988
2022-07-05 15:49:16 +02:00
Phil Sutter
7d8e51ef99 iptables-1.8.8-3.el9
- arptables: Support -x/--exact flag

Related: rhbz#2084543
2022-06-08 18:35:59 +02:00
Phil Sutter
73cb621bac iptables-1.8.8-2.el9
- tests: shell: Check overhead in iptables-save and -restore

Related: rhbz#2065330
2022-06-02 14:49:22 +02:00
Phil Sutter
08d57e3b00 iptables-1.8.8-1.el9
- new version

Resolves: rhbz#2084543
2022-05-13 17:53:42 +02:00
Phil Sutter
21c02e6c1a iptables-1.8.7-30.el9
- Use proto_to_name() from xshared in more places

Resolves: rhbz#2065330
2022-03-18 14:47:28 +01:00
Phil Sutter
a556128cb3 iptables-1.8.7-29.el9
- libxtables: Boost rule target checks by announcing chain names
- libxtables: Implement notargets hash table
- nft: Reject standard targets as chain names when restoring
- xshared: Merge and share parse_chain()
- xshared: Prefer xtables_chain_protos lookup over getprotoent
- nft: Speed up immediate parsing
- nft: Simplify immediate parsing

Resolves: rhbz#2065330
2022-03-18 11:37:11 +01:00
Phil Sutter
63c9e2ff10 iptables-1.8.7-28.el9
- extensions: SECMARK: Use a better context in test case

Related: rhbz#2047558
2022-02-16 12:44:11 +01:00
Phil Sutter
55e20eb624 iptables-1.8.7-27.el9
- extensions: SECMARK: Implement revision 1

Resolves: rhbz#2047558
2022-01-28 23:26:47 +01:00
Phil Sutter
17f0287b89 iptables-1.8.7-26.el9
- tests/shell: Assert non-verbose mode is silent
- nft: Fix for non-verbose check command

Resolves: rhbz#1989466
2021-10-11 17:31:01 +02:00
Phil Sutter
0c31aae58c iptables-1.8.7-25.el9
- ebtables: Dump atomic waste
- doc: ebtables-nft.8: Adjust for missing atomic-options
- nft: Use xtables_malloc() in mnl_err_list_node_add()

Resolves: rhbz#1995473, rhbz#2011406
2021-10-06 17:06:16 +02:00
Phil Sutter
87d774601e iptables-1.8.7-24.el9
- Add missing readlink required for iptables-nft(post)

Resolves: rhbz#2009742
2021-10-01 15:53:29 +02:00
Mohan Boddu
43aebb774a Rebuilt for IMA sigs, glibc 2.34, aarch64 flags
Related: rhbz#1991688
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-08-09 20:59:20 +00:00
Phil Sutter
4816cd15af iptables-1.8.7-22.el9
- nft-services must not depend on specific arch's build

Related: rhbz#1986982
2021-08-05 15:57:36 +02:00
Phil Sutter
38177fbc58 iptables-1.8.7-21.el9
- Build services sub-packages as noarch

Resolves: rhbz#1986982
2021-08-05 15:27:44 +02:00
Phil Sutter
5141adf17e iptables-1.8.7-20.el9
- Make nft-services obsolete nft-compat to fix upgrade path

Related: rhbz#1951074
2021-07-30 16:05:58 +02:00
Phil Sutter
85c22b3c9c iptables-1.8.7-19.el9
- Build iptables-services on C9S only
- Use systemd_ordering in nft-services, too
- Drop compat package, nft-services serves well for that purpose
- Make legacy unconditionally provide iptables, it's not built on RHEL

Resolves: rhbz#1951074
2021-07-29 18:14:24 +02:00
Phil Sutter
b67311577f iptables-1.8.7-18.el9
- Make iptables-nft-services require iptables-services to avoid confusion
- Add deprecation notice to iptables-extensions man page as well

Resolves: rhbz#1985422, rhbz#1951074
2021-07-28 17:33:46 +02:00
Phil Sutter
41665c6c90 iptables-1.8.7-17.el9
- Provide a compat package to fix upgrade path from RHEL8

Resolves: rhbz#1951074
2021-07-12 13:08:50 +02:00
Phil Sutter
1dd5f70a68 iptables-1.8.7-16.el9
- Review systemd unit file

Resolves: rhbz#1977212
2021-07-05 14:15:52 +02:00
Phil Sutter
d5f1528238 iptables-1.8.7-15.el9
- doc: Improve deprecation notices a bit
- nft: cache: Sort chains on demand only
- nft: Increase BATCH_PAGE_SIZE to support huge rulesets

Related: rhbz#1945151
Resolves: rhbz#1978362
2021-07-02 18:26:15 +02:00
Štěpán Němec
629e39ce05 gating.yaml: don't gate on osci.brew-build.tier0.functional
It's currently just noise that we have to waive manually: the tests
(inherited from Fedora) are out of date, unmaintained and duplicate
other (internal RHEL) tests.

Longer-term solution yet to be worked out.
2021-06-28 09:39:00 +02:00
Phil Sutter
44ad65d496 iptables-1.8.7-14.el9
- doc: Add deprecation notices to all relevant man pages

Resolves: rhbz#1945151
2021-06-25 11:12:09 +02:00
Phil Sutter
d65c79ab67 iptables-1.8.7-13.el9
- extensions: sctp: Fix nftables translation
- nft: Fix bitwise expression avoidance detection
- iptables-nft: fix -Z option
- Do not build legacy sub-packages on RHEL

Resolves: rhbz#1927721
2021-06-16 15:16:36 +02:00
Phil Sutter
0f36a69aec tests: Fix bridge-utils replacement
Typo in 'ip link add', 'type' argument was missing. Also update
'Requires:' line in Makefile.

Related: RHBZ#1954581
2021-06-16 11:35:10 +02:00
Phil Sutter
099ca6a1b5 tests: Drop dependency on non-existing bridge-utils
Replace the calls by equivalent ones to 'ip'.

Related: RHBZ#1954581
2021-06-14 13:42:25 +02:00
Phil Sutter
18fd73d348 iptables-1.8.7-12.el9
- arptables-nft-helper: Remove bashisms
- ebtables-helper: Drop unused variable, add a missing quote
- extensions: libxt_string: Avoid buffer size warning for strncpy()
- libxtables: Introduce xtables_strdup() and use it everywhere
- extensions: libebt_ip6: Use xtables_ip6parse_any()
- iptables-apply: Drop unused variable
- nft: Avoid buffer size warnings copying iface names
- nft: Avoid memleak in error path of nft_cmd_new()
- libxtables: Fix memleak in xtopt_parse_hostmask()
- extensions: libebt_ip6: Drop unused variables
- libxtables: Drop leftover variable in xtables_numeric_to_ip6addr()

Resolves: RHBZ#1938745
2021-06-10 18:38:53 +02:00
Štěpán Němec
c842cc8e23 Enable RHEL 9 gating (equivalent to RHEL 8) 2021-06-10 10:33:19 +02:00
Phil Sutter
4a68e9f94a iptables-1.8.7-11.el9
- Fix License name in spec file
- Eliminate inet_aton() and inet_ntoa()
- nft-arp: Make use of ipv4_addr_to_string()
- Make legacy sub-packages obsolete older non-legacy ones
- Fix dates in changelog
- iptables.init: Fix functionality for iptables-nft
- iptables.init: Ignore sysctl files not suffixed '.conf'
- iptables.init: Drop unused NEW_MODUTILS check
- iptables.init: Drop some trailing whitespace

Resolves: RHBZ#1954581, RHBZ#1958262
2021-05-12 12:13:44 +02:00
Phil Sutter
b6b32fa391 iptables-1.8.7-10
- Add provides to iptables-nft-services

Related: RHBZ#1951074
2021-04-23 17:09:48 +02:00
Phil Sutter
5d9bdbf66a iptables-1.8.7-9
- Add nft-services subpackage

Resolves: RHBZ#1951074
2021-04-21 18:30:44 +02:00
Phil Sutter
3c640d04d2 iptables-1.8.7-8
- Drop hacks to maintain upgrade path

Related: RHBZ#1927721
2021-04-19 15:33:15 +02:00
Mohan Boddu
724cb78453 - Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937
Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2021-04-16 00:36:59 +00:00
Robert Scheck
6e213cbdf7 iptables-1.8.7-6
This patch combines changes from f34 since iptables-1.8.7-3:

- Spec file cleanup
- Restore alternatives configuration after upgrade
- Fix license location
- Fix upgrade path with package rename
- Add missing dependencies to iptables-nft package
- Drop bootstrap code again
- Drop workarounds for F24 and lower
- Fix iptables-utils summary
- Ship iptables-apply with iptables-utils
- Reduce files sections by use of globbing
- Ship common man pages with iptables-libs
- Ship *-translate man pages with iptables-nft
- Move legacy iptables binaries, libraries and headers into sub-packages
- Introduce compat sub-package to help with above transitions
- Drop libipulog header from devel package, this belongs to libnetfilter_log
- Do not ship internal headers in devel package

Resolves: RHBZ#1927721
2021-04-15 16:56:49 +02:00
DistroBaker
b95090f5f5 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/iptables.git#648ffbc31613acd9f9015892c0820df9be00cb89
2021-01-28 14:21:56 +00:00
DistroBaker
78e6451c8f Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/iptables.git#1c2b75e472ee9d0aa4807a450d61f4bec138b664
2021-01-16 21:59:11 +00:00
DistroBaker
376a021a21 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/iptables.git#706150b129c945e887c203d96492d03046199bd2
2020-11-22 17:23:18 +00:00
Troy Dawson
701b94829c RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/iptables#4ef8aaebbe6d2223197a3ce86a056949368aca86
2020-11-18 09:49:59 -08:00
DistroBaker
bed0b741e1 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/iptables.git#e922d284f823879ec8985b305b345963aa8c9f7e
2020-11-09 13:13:01 +00:00
DistroBaker
d2f355ad59 Merged update from upstream sources
This is an automated DistroBaker update from upstream sources.
If you do not know what this is about or would like to opt out,
contact the OSCI team.

Source: https://src.fedoraproject.org/rpms/iptables.git#730c58d40441a3e02712919ad84548d819a7d1bd
2020-11-01 00:06:32 +00:00
Petr Šabata
311316e433 RHEL 9.0.0 Alpha bootstrap
The content of this branch was automatically imported from Fedora ELN
with the following as its source:
https://src.fedoraproject.org/rpms/iptables#fb677ca83cc1a1ad64e67ae869318c8909650c47
2020-10-15 13:44:19 +02:00
Release Configuration Management
3e4cbdd4d1 New branch setup 2020-10-08 15:19:43 +00:00