diff options
author | Constanze Hausner <constanze@gentoo.org> | 2013-09-22 13:17:02 +0000 |
---|---|---|
committer | Constanze Hausner <constanze@gentoo.org> | 2013-09-22 13:17:02 +0000 |
commit | 38340faa7ac8bec252fb07bca4141a0b83adf9b6 (patch) | |
tree | ef0368aca292417a152c2d1205acdd7637d70466 /net-firewall | |
parent | Bugfix 459316 for 4.5.18; Thanks to Thomas D. (diff) | |
download | gentoo-2-38340faa7ac8bec252fb07bca4141a0b83adf9b6.tar.gz gentoo-2-38340faa7ac8bec252fb07bca4141a0b83adf9b6.tar.bz2 gentoo-2-38340faa7ac8bec252fb07bca4141a0b83adf9b6.zip |
Bugfix 459316 for 4.5.18; Thanks to Thomas D.
(Portage version: 2.2.1/cvs/Linux x86_64, signed Manifest commit with key BB80F419010E3EC3)
Diffstat (limited to 'net-firewall')
5 files changed, 193 insertions, 1 deletions
diff --git a/net-firewall/shorewall-lite/ChangeLog b/net-firewall/shorewall-lite/ChangeLog index b714ea298b78..d1057af0f7a2 100644 --- a/net-firewall/shorewall-lite/ChangeLog +++ b/net-firewall/shorewall-lite/ChangeLog @@ -1,6 +1,14 @@ # ChangeLog for net-firewall/shorewall-lite # Copyright 1999-2013 Gentoo Foundation; Distributed under the GPL v2 -# $Header: /var/cvsroot/gentoo-x86/net-firewall/shorewall-lite/ChangeLog,v 1.137 2013/08/29 19:01:51 constanze Exp $ +# $Header: /var/cvsroot/gentoo-x86/net-firewall/shorewall-lite/ChangeLog,v 1.138 2013/09/22 13:17:02 constanze Exp $ + +*shorewall-lite-4.5.18-r1 (22 Sep 2013) + + 22 Sep 2013; Constanze Hausner <constanze@gentoo.org> + +files/4.5.18-r1/shorewall-lite.initd, + +files/4.5.18-r1/shorewall-lite.systemd, +files/4.5.18-r1/shorewallrc_new, + +shorewall-lite-4.5.18-r1.ebuild: + Bugfix 459316 for 4.5.18; Thanks to Thomas D. 29 Aug 2013; Constanze Hausner <constanze@gentoo.org> metadata.xml: Added Thomas D. as new maintainer diff --git a/net-firewall/shorewall-lite/files/4.5.18-r1/shorewall-lite.initd b/net-firewall/shorewall-lite/files/4.5.18-r1/shorewall-lite.initd new file mode 100644 index 000000000000..3511ba19408c --- /dev/null +++ b/net-firewall/shorewall-lite/files/4.5.18-r1/shorewall-lite.initd @@ -0,0 +1,82 @@ +#!/sbin/runscript +# Copyright 1999-2013 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/net-firewall/shorewall-lite/files/4.5.18-r1/shorewall-lite.initd,v 1.1 2013/09/22 13:17:02 constanze Exp $ + +description='The Shoreline Firewall Lite, more commonly known as "Shorewall Lite", is' +description="${description} a high-level tool for configuring Netfilter." + +extra_commands="clear" +extra_started_commands="reset" + +description_clear="Clear will remove all rules and chains installed by" +description_clear="${description_clear} Shorewall Lite. The firewall is" +description_clear="${description_clear} then wide open and unprotected." + +description_reset="All the packet and byte counters in the firewall are reset." + +depend() { + need net + provide firewall + after ulogd +} + +status() { + local _retval + /sbin/shorewall-lite status 1>/dev/null + _retval=$? + if [ ${_retval} = '0' ]; then + einfo 'status: started' + mark_service_started "${SVCNAME}" + return 0 + else + einfo 'status: stopped' + mark_service_stopped "${SVCNAME}" + return 3 + fi +} + +start() { + ebegin "Starting shorewall-lite" + /sbin/shorewall-lite start 1>/dev/null + eend $? +} + +stop() { + ebegin "Stopping shorewall-lite" + /sbin/shorewall-lite stop 1>/dev/null + eend $? +} + +restart() { + # shorewall comes with its own control script that includes a + # restart function, so refrain from calling svc_stop/svc_start + # here. Note that this comment is required to fix bug 55576; + # runscript.sh greps this script... (09 Jul 2004 agriffis) + + ebegin "Restarting shorewall-lite" + /sbin/shorewall-lite status 1>/dev/null + if [ $? != 0 ] ; then + svc_start + else + /sbin/shorewall-lite restart 1>/dev/null + fi + eend $? +} + +clear() { + # clear will remove all the rules and bring the system to an unfirewalled + # state. (21 Nov 2004 eldad) + + ebegin "Clearing all shorewall-lite rules and setting policy to ACCEPT" + /sbin/shorewall-lite clear 1>/dev/null + eend $? +} + +reset() { + # reset the packet and byte counters in the firewall + + ebegin "Resetting the packet and byte counters in shorewall-lite" + /sbin/shorewall-lite reset 1>/dev/null + eend $? +} diff --git a/net-firewall/shorewall-lite/files/4.5.18-r1/shorewall-lite.systemd b/net-firewall/shorewall-lite/files/4.5.18-r1/shorewall-lite.systemd new file mode 100644 index 000000000000..aeb89b5abccb --- /dev/null +++ b/net-firewall/shorewall-lite/files/4.5.18-r1/shorewall-lite.systemd @@ -0,0 +1,20 @@ +# +# The Shoreline Firewall (Shorewall) Packet Filtering Firewall - V4.4 +# +# Copyright 2011 Jonathan Underwood (jonathan.underwood@gmail.com) +# +[Unit] +Description=Shorewall IPv4 firewall (lite) +After=syslog.target +After=network.target + +[Service] +Type=oneshot +RemainAfterExit=yes +EnvironmentFile=/etc/shorewall-lite +StandardOutput=syslog +ExecStart=/sbin/shorewall-lite $OPTIONS start +ExecStop=/sbin/shorewall-lite $OPTIONS stop + +[Install] +WantedBy=multi-user.target diff --git a/net-firewall/shorewall-lite/files/4.5.18-r1/shorewallrc_new b/net-firewall/shorewall-lite/files/4.5.18-r1/shorewallrc_new new file mode 100644 index 000000000000..0f9301cfeb49 --- /dev/null +++ b/net-firewall/shorewall-lite/files/4.5.18-r1/shorewallrc_new @@ -0,0 +1,22 @@ +# +# Gentoo Shorewall 4.5 rc file +# +BUILD= #Default is to detect the build system +HOST=linux #Generic Linux +PREFIX=@GENTOO_PORTAGE_EPREFIX@/usr #Top-level directory for shared files, libraries, etc. +SHAREDIR=${PREFIX}/share #Directory for arch-neutral files. +LIBEXECDIR=${PREFIX}/share #Directory for executable scripts. +PERLLIBDIR=${PREFIX}/share/shorewall #Directory to install Shorewall Perl module directory +CONFDIR=@GENTOO_PORTAGE_EPREFIX@/etc #Directory where subsystem configurations are installed +SBINDIR=@GENTOO_PORTAGE_EPREFIX@/sbin #Directory where system administration programs are installed +MANDIR=${PREFIX}/share/man #Directory where manpages are installed. +INITDIR=${CONFDIR}/init.d #Directory where SysV init scripts are installed. +INITFILE=${PRODUCT} #Name of the product's installed SysV init script +INITSOURCE=init.gentoo.sh #Name of the distributed file to be installed as the SysV init script +ANNOTATED= #If non-zero, annotated configuration files are installed +SYSTEMD=@GENTOO_PORTAGE_EPREFIX@/usr/lib/systemd/system #Directory where .service files are installed (systems running systemd only) +SYSCONFFILE= #Name of the distributed file to be installed in $SYSCONFDIR +SYSCONFDIR=${CONFDIR}/conf.d #Directory where SysV init parameter files are installed +SPARSE= #If non-empty, only install $PRODUCT/$PRODUCT.conf in $CONFDIR +VARLIB=@GENTOO_PORTAGE_EPREFIX@/var/lib #Directory where product variable data is stored. +VARDIR=${VARLIB}/${PRODUCT} #Directory where product variable data is stored. diff --git a/net-firewall/shorewall-lite/shorewall-lite-4.5.18-r1.ebuild b/net-firewall/shorewall-lite/shorewall-lite-4.5.18-r1.ebuild new file mode 100644 index 000000000000..c27135f80a75 --- /dev/null +++ b/net-firewall/shorewall-lite/shorewall-lite-4.5.18-r1.ebuild @@ -0,0 +1,60 @@ +# Copyright 1999-2013 Gentoo Foundation +# Distributed under the terms of the GNU General Public License v2 +# $Header: /var/cvsroot/gentoo-x86/net-firewall/shorewall-lite/shorewall-lite-4.5.18-r1.ebuild,v 1.1 2013/09/22 13:17:02 constanze Exp $ + +EAPI="5" + +inherit eutils prefix systemd versionator + +# Select version (stable, RC, Beta): +MY_PV_TREE=$(get_version_component_range 1-2) # for devel versions use "development/$(get_version_component_range 1-2)" +MY_PV_BASE=$(get_version_component_range 1-3) + +MY_PN="${PN/-lite/}" +MY_P="${MY_PN}-${MY_PV_BASE}" +MY_P_DOCS="${MY_PN}-docs-html-${PV}" + +DESCRIPTION="An iptables-based firewall whose config is handled by a normal Shorewall." +HOMEPAGE="http://www.shorewall.net/" +SRC_URI="http://www1.shorewall.net/pub/${MY_PN}/${MY_PV_TREE}/${MY_P}/${P}.tar.bz2 + doc? ( http://www1.shorewall.net/pub/${MY_PN}/${MY_PV_TREE}/${MY_P}/${MY_P_DOCS}.tar.bz2 )" + +LICENSE="GPL-2" +SLOT="0" +KEYWORDS="~alpha ~amd64 ~hppa ~ppc ~ppc64 ~sparc ~x86" +IUSE="doc" + +RDEPEND="net-firewall/iptables + sys-apps/iproute2 + =net-firewall/shorewall-core-${PVR}" + +src_prepare() { + cp "${FILESDIR}"/${PVR}/shorewallrc_new "${S}"/shorewallrc.gentoo || die "Copying shorewallrc_new failed" + eprefixify "${S}"/shorewallrc.gentoo + + cp "${FILESDIR}"/${PVR}/${PN}.initd "${S}"/init.gentoo.sh || die "Copying shorewall.initd failed" + + epatch_user +} + +src_configure() { + :; +} + +src_compile() { + :; +} + +src_install() { + keepdir /var/lib/shorewall-lite + + cd "${WORKDIR}/${P}" + DESTDIR="${D}" ./install.sh shorewallrc.gentoo || die "install.sh failed" + systemd_newunit "${FILESDIR}"/${PVR}/shorewall-lite.systemd 'shorewall-lite.service' + + dodoc changelog.txt releasenotes.txt + if use doc; then + cd "${WORKDIR}/${MY_P_DOCS}" + dohtml -r * + fi +} |