Commit Graph

86 Commits

Author SHA1 Message Date
Wang Mingyu
1356055ce7 conntrack-tools: upgrade 1.4.5 -> 1.4.6
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08 08:15:03 -07:00
Wang Mingyu
ed94a56d91 libnetfilter-conntrack: upgrade 1.0.7 -> 1.0.8
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08 08:15:03 -07:00
Pierre-Jean Texier
519b86c549 nftables: upgrade 0.9.3 -> 0.9.4
See https://lwn.net/Articles/816528/

Also remove patch applied upstream

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-03 14:45:54 -07:00
Pierre-Jean Texier
fbebf1bb0a libnftnl: upgrade 1.1.5 -> 1.1.6
This includes the following changes:

ac0778e build: libnftnl 1.1.6 release
60e6d9b include: update nf_tables.h.
c8cc25b Revert "bitwise: add support for passing mask and xor via registers."
4bf470b expr: nat: snprint flags in hexadecimal
ff92868 expr: masq: revisit _snprintf()
c76d36a set: support for NFTNL_SET_EXPR
9270557 set_elem: missing set and build for NFTNL_SET_ELEM_EXPR
4c8abad chain: add NFTNL_CHAIN_FLAGS
75b8778 bitwise: add support for passing mask and xor via registers.
8db0a94 include: update nf_tables.h.
7b4848c tests: bitwise: fix error message.
ec3622b src: add nftnl_*_{get,set}_array()
629ee38 src: Fix for reading garbage in nftnl_chain getters
04cc28d set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END
7cd41b5 set: Add support for NFTA_SET_DESC_CONCAT attributes
131a6c2 include: resync nf_tables.h cache copy
8fa63d7 bitwise: add support for left- and right-shifts.
3f232d7 bitwise: add support for new netlink attributes.
3fb5640 include: update nf_tables.h.
154104a bitwise: add helper to print boolean expressions.
66d6afb bitwise: fix some incorrect indentation.
35bac9a Update gitignore.
325cb6f include: Remove buffer.h
6079297 expr: meta: add slave device matching
7e15d9d udata: support for TLV attribute nesting
7f72b5c udata: add NFTNL_UDATA_SET_*TYPEOF* definitions
d16abf7 include: typo in object.h C++ wrapper
dfe3828 examples: Replace use of deprecated symbols
d95a703 chain: Correctly check realloc() call
835d645 flowtable: Correctly check realloc() call
32a8c5f chain: Fix memleak in error path of nftnl_chain_parse_devs()
ba1b025 flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs()
b238876 tests: flowtable: Don't check NFTNL_FLOWTABLE_SIZE

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-03 14:45:54 -07:00
Wang Mingyu
ead91f0279 arno-iptables-firewall: upgrade 2.0.3 -> 2.1.0
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06 19:22:26 -08:00
Khem Raj
e919c1d508 nftables: Package python scripts into nonarch libdir
Helps fixing packaging errors on mulilib builds

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20 16:07:50 -08:00
Alex Kiernan
b2058e0507 nftables: Expand PACKAGECONFIG, cleanup build
Fill out PACKAGECONFIG options for json, mini-gmp, readline and xtables
whilst matching existing behaviour. Drop PACKAGECONFIG to weak default.

Fix upstream version matching so the very old 0.099 is rejected as the
newest version.

Drop seemingly redundant ASNEEDED which was added in 5477d5bcb7
("nftables: Upgrade to 0.7") without explanation.

Package python files from libdir not libdir_native; whilst they're the
same thing, building a target package with native variables is odd.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-17 18:44:24 -08:00
Todd Cunningham
906efee427 nftables: upgrade 0.9.2 -> 0.9.3
New patch:
    0001-update-python3-nftables-reference.patch

Signed-off-by: Todd Cunningham <tcunningham07@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-16 08:38:35 -08:00
Todd Cunningham
9625a375ee libnftnl: upgrade 1.1.4 -> 1.1.5
Remove obselete patch:
    0001-Move-exports-before-symbol-definition.patch
Refresh patch:
    0002-avoid-naming-local-function-as-one-of-printf-family.patch
Add one new file in this patch:
    src/obj/synproxy.c

Signed-off-by: Todd Cunningham <tcunningham07@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-13 18:29:14 -08:00
Alex Kiernan
ab86dcdc90 nftables: Fix documentation generation
Switch PACKAGECONFIG from man to manpages so we are included when
api-documentation is set. Ensure correct tools are available to build
the documentation and avoid unsupported option failures by not passing
`--enable-man-doc`.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-03 09:31:53 -08:00
Oleksandr Kravchuk
2196272e89 nftables: update to 0.9.2
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-27 12:11:16 -07:00
Yuan Chao
38d83cfd0c libnftnl: upgrade 1.1.3 -> 1.1.4
Refresh patch:
    0002-avoid-naming-local-function-as-one-of-printf-family.patch
Add two new file in this patch:
    src/expr/synproxy.c
    src/obj/ct_expect.c

Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-20 21:11:27 -07:00
Mariano Lopez
a8f362deb3 nftables: 0.9.0 > 0.9.1
The upgrade includes a new python library, therefore added the
{PN}-python package.

Signed-off-by: Mariano López <just.another.mariano@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-23 18:39:29 -07:00
Khem Raj
ed399faf31 arno-iptables-firewall: Switch to git fetcher
github archives are not reliable
Fixes
arno-iptables-firewall-2.0.3: https://github.com/arno-iptables-firewall/aif/archive/2.0.3.tar.gz: SRC_URI uses unstable GitHub archives [src-uri-bad]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:40:20 -07:00
Oleksandr Kravchuk
8f114fa881 libnftnl: update to 1.1.3
Updated libnftnl to 1.1.3 and refreshed patches.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-13 23:28:06 -07:00
Oleksandr Kravchuk
9860cda823 conntrack-tools: update to 1.4.5
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10 14:10:13 -07:00
Oleksandr Kravchuk
d703b5984e libnetfilter-conntrack: update to 1.0.7
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10 09:17:08 -07:00
Oleksandr Kravchuk
7f887ee74b libnetfilter-queue: fix update to 1.0.3
SRC_URI was mistakenly not updated in @57967659f4724a8b614f.

Removed patch was upstreamed. Another one was refreshed with devtool.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-08 00:28:05 -07:00
Oleksandr Kravchuk
7832621d1c ebtables: add UPSTREAM_CHECK_URI
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-06 08:32:04 -07:00
Oleksandr Kravchuk
b99b30f034 arno-iptables-firewall: update to 2.0.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-05 23:22:39 -07:00
Oleksandr Kravchuk
57967659f4 libnetfilter-queue: update to 1.0.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:57 -07:00
Oleksandr Kravchuk
d96b0bd015 nftables: add UPSTREAM_CHECK_URI
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:56 -07:00
Oleksandr Kravchuk
7c43284cd2 nfacct: add UPSTREAM_CHECK_URI
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:56 -07:00
Alex Kiernan
a445b3bca4 nftables: Upgrade to 0.9.0
Drop all the backports as they're upstream

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12 10:04:31 -08:00
Alex Kiernan
cb9b98f69b libnftnl: Upgrade to 1.1.1
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12 10:04:31 -08:00
Martin Jansa
15a8a49e03 nftables: add dependency on bison-native
* fixes:
checking whether yytext is a pointer... no
checking for bison... no
checking for byacc... no
*** Error: No suitable bison/yacc found. ***
    Please install the 'bison' package.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:27 -04:00
Yi Zhao
30ff25843f ebtables: add RECIPE_UPSTREAM_VERSION
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-29 12:57:23 -07:00
Khem Raj
e60ce61024 recipes: Link with libtirpc
glibc no longer provides rpc implementation

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-05-17 08:32:26 -07:00
Armin Kuster
a0cbe9f308 libnetfilter-cthelper: refresh patches
WARNING: libnetfilter-cthelper-1.0.0-r0 do_patch:
Some of the context lines in patches were ignored. This can lead to incorrectly applied patches.
The context lines in the patches can be updated with devtool:

    devtool modify <recipe>
    devtool finish --force-patch-refresh <recipe> <layer_path>

Then the updated patches and the source tree (in devtool's workspace)
should be reviewed to make sure the patches apply in the correct place
and don't introduce duplicate lines (which can, and does happen
when some of the context is ignored). Further information:
http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html
https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450
Details:
Applying patch libnetfilter-cthelper-visibility-hidden.patch
patching file doxygen.cfg.in
patching file src/internal.h
patching file src/libnetfilter_cthelper.c
Hunk #2 succeeded at 118 with fuzz 2.

Now at patch libnetfilter-cthelper-visibility-hidden.patch

Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13 12:43:43 -07:00
Khem Raj
4b3e87df56 ebtables: Fix duplicate definition errors due to netinet/ether.h
Make the patch musl specific as it is regressing glibc 2.27

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-06 08:12:21 -04:00
Li Zhou
7166aaaf38 ebtables: enable KERNEL_64_USERSPACE_32 for arm
On arm64 board, run the kernel as 64bit with 32bit userpace ebtables,
then run ebtables command:
ebtables -A OUTPUT -p arp -o eth3 -j DROP
Below error occurs:
kernel msg: ebtables bug: please report to author: Standard target size too big

To solve this, enable KERNEL_64_USERSPACE_32 for arm as the commit
<ebtables: enable KERNEL_64_USERSPACE_32 for powerpc> do.

Use TARGET_ARCH to replace KARCH here because that KARCH can't always get
value by default.

Signed-off-by: Li Zhou <li.zhou@windriver.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-06 08:12:21 -04:00
Joshua Watt
1bf1cfab46 ebtables: Remove bashisms
Removes the bashism of prefacing shell functions with "function" and
renames the clear function to not conflict with the command of the same
name.

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-02-05 10:40:18 -05:00
Mark Hatle
841aadaa33 libmnl: Move to oe-core
Moved to oe-core, remove this version.

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-10-16 13:24:11 -04:00
Huang Qiyu
960d570d98 ebtables: Add HOMEPAGE info into recipe file.
Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-10-11 16:22:49 -04:00
Andre McCurdy
7f72300736 ebtables: replace ebtables-save perl script with bash rewrite
Fedora provides a bash replacement for the default ebtables-save perl
script. Using it allows the ebtables run-time dependency on perl to
be replaced with a runtime dependency on bash - which is lower
overhead and more likely to be present on typical embedded systems
already.

  https://bugzilla.redhat.com/show_bug.cgi?id=746040
  http://pkgs.fedoraproject.org/cgit/rpms/ebtables.git/tree/ebtables-save

Since ebtables-save no longer contains a references to /usr, the
previous QA issue workaround of moving it from ${base_sbindir} to
${sbindir} is no longer required.

  http://git.openembedded.org/meta-openembedded/commit/?id=a7c6fcebee7d9f86c356ea92de445d89e714ff62

Signed-off-by: Andre McCurdy <armccurdy@gmail.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-08 16:38:14 -04:00
Martin Jansa
ec9e5ed062 recipes: remove blacklisted recipes
* as PNBLACKLIST message says, these recipes are blacklisted for long
  time and nobody showed any interest to fix them
* remove all unused .patch and .inc files as well

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-08-31 10:18:33 +02:00
André Draszik
cf95634bf4 nftables: backport a few ICMP & ICMPv6 fixes
- assign network ctx for ICMP & ICMPv6
- additional ICMPv6 types
- allow update of net base w. meta l4proto ipv6-icmp
- l4 proto fixes

The initial trigger was that ICMPv6 type 143
(mld2-listener-report) wasn't working as expected.

Signed-off-by: André Draszik <adraszik@tycoint.com>
Acked-by: Sylvain Lemieux <slemieux@tycoint.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-06-28 10:29:12 -04:00
Khem Raj
752653a10e libnetfilter-conntrack: Upgrade to 1.0.6
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:15 -04:00
Khem Raj
0094968f13 conntrack-tools: Upgrade to 1.4.4
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:15 -04:00
Khem Raj
93de05ce5f libnetfilter-acct: Fix build with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:15 -04:00
Khem Raj
46eb9bad8a libnetfilter-queue: Fix symbol visibility bug found with clang
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:15 -04:00
Khem Raj
0237ee20da libnetfilter-cthelper, libnetfilter-cttimeout: Backport patches to fix symbol visibility
These are needed for building it with clang

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:14 -04:00
Khem Raj
5477d5bcb7 nftables: Upgrade to 0.7
Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:14 -04:00
Khem Raj
2571887a95 libnftnl: Upgrade to 1.0.7
Fix build with clang while here

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 16:10:14 -04:00
Oliver Graute
25bfdafcae nfacct: fixed SRC_URI and dropped workdir statement
Signed-off-by: Oliver Graute <oliver.graute@neuhaus.de>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 15:55:37 -04:00
Khem Raj
1412617849 libnetfilter-queue: Update to git for SRC_URI
brings in the fixes to build on musl
Add a typo fix patch

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 15:55:36 -04:00
Khem Raj
3692f1e202 libnetfilter-log: Switch to git URI
Move to tip of tree which has needed fixes for musl build
add missing dependency on libmnl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 15:55:36 -04:00
Khem Raj
2cc844809f ebtables: Fix build with musl
Backport upstream fixes and add fixes to make it work with musl

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 15:55:35 -04:00
Khem Raj
729eae7490 libnfnetlink: Backport patches to fix musl build
There are few upstream patches that are required for getting it
working with musl, backport these patches on top of 1.0.1

Signed-off-by: Khem Raj <raj.khem@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25 15:55:35 -04:00
Amarnath Valluri
9f0eebd829 ebtables: Move files only when src != dst.
While moving files from ${base_sbindir} to ${sbindir} check if both are same.

Signed-off-by: Amarnath Valluri <amarnath.valluri@intel.com>
Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-03-23 08:26:59 -04:00