Commit Graph

110 Commits

Author SHA1 Message Date
wangmy
868479a3f5 libnetfilter-log: upgrade 1.0.1 -> 1.0.2
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-23 08:35:08 -08:00
Richard Purdie
b402a3076f recipes: Update SRC_URI branch and protocols
This patch updates SRC_URIs using git to include branch=master if no branch is set
and also to use protocol=https for github urls as generated by the conversion script
in OE-Core.

Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-11-03 06:57:49 -07:00
Trevor Gamblin
188b85e73f nftables: upgrade 0.9.9 -> 1.0.0
From the changelog (https://marc.info/?l=netfilter&m=162939459210790&w=2):

- Catch-all set element support: This allows users to define the
  special wildcard set element for anything else not defined in
  the set
- Define variables from the command line through --define
- Allow to use stateful expressions in maps
- Add command to list the netfilter hooks pipeline for a given packet
  family. If device is specified, then ingress path is also included
- Allow to combine jhash, symhash and numgen expressions with the
  queue statement, to fan out packets to userspace queues via
  nfnetlink_queue
- Expand variable containing set into multiple mappings
- Allow to combine verdict maps with interval concatenations
- Simplify syntax for NAT mappings. You can specify an IP range, or a
  specific IP and port, or a combination of range of IP addresses and
  ports
- Bugfixes

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-09-01 08:25:42 -07:00
Martin Jansa
c61dc077bb Convert to new override syntax
This is the result of automated script (0.9.1) conversion:

oe-core/scripts/contrib/convert-overrides.py .

converting the metadata to use ":" as the override character instead of "_".

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2021-08-03 10:21:25 -07:00
Trevor Gamblin
f7751298c5 nftables: upgrade 0.9.8 -> 0.9.9
Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Trevor Gamblin
c90b87b81e libnftnl: upgrade 1.1.9 -> 1.2.0
Upgrade libnftnl in preparation for the upgrade of nftables, since the
latter requires libnftnl >= 1.2.0.

Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-06-03 09:13:52 -07:00
Oleksandr Kravchuk
917c0bfe9f ipset: update to 7.11
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-03-06 07:53:38 -08:00
Oleksandr Kravchuk
5b86d3fa8c ipset: update to 7.10
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-06 21:52:33 -08:00
Robert P. J. Day
09b031c654 correct "RRCOMMENDS" typo in ipset recipe
Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-02-04 15:32:14 -08:00
Adrian Freihofer
b7f83ca2f7 nftables: upgrade 0.9.7 -> 0.9.8
Added missing RDEPENDS to the libnft library from nftables-python to
libnftable.so.1 which is loaded dynamically by LibraryLoader into
python.

Added json to default PACKAGECONFIG which is probably used as well when
compiled with python support. For example firewalld crashes at runtime
if nftables is compiled without json support.

Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:58:54 -08:00
zangrc
e07f675fd7 libnftnl: upgrade 1.1.8 -> 1.1.9
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-25 14:34:06 -08:00
Armin Kuster
6312f419dd ipset: add recipe
This is needed for login-shield pkg in meta-security

Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-18 14:35:52 -08:00
He Zhe
00958a182e ebtables: Add symbol link /sbin/ebtables
The original /sbin/ebtables has been moved to /usr/sbin/ebtables-legacy.
But the old path is still used by some other software libvirt.

libvirtd[809]: direct firewall backend requested,
but /sbin/ebtables is not available: No such file or directory

As stated in the related change in ebtable git repo:
The new -legacy binary has no problem if called via a symlink with the
'ebtables' name, so users can still name this binary with whatever name.

So we add a symbol link from /usr/sbin/ebtables-legacy to /sbin/ebtables.

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
Yi Zhao
752bb30c39 ebtables: do not install /etc/ethertypes
Refer to Debian, patch the Makefile to prevent /etc/ethertypes
installation instead of removing it in do_install_append.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:16:25 -08:00
Yi Zhao
5816f414af ebtables: remove upstream ebtables-legacy-save
Remove the upstream ebtables-legacy-save before we install the local
ones. And install it to ${sbindir} rather than ${base_sbindir}.

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-05 09:15:59 -08:00
Yi Zhao
cac0daacd1 ebtables: add missing file ebtables.common
The ebtables.common is required by ebtables.service. Add it back.

Fixes:
systemd[660]: ebtables.service: Failed to locate executable /usr/sbin/ebtables.common: No such file or directory
systemd[660]: ebtables.service: Failed at step EXEC spawning /usr/sbin/ebtables.common: No such file or directory

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2021-01-04 14:48:29 -08:00
zangrc
b1120e126e ebtables: upgrade 2.0.10-4 -> 2.0.11
Refresh the following patch:
0010-Adjust-header-include-sequence.patch

Referring to Fedora style, ebtables-legacy-save and ebtables.service are retained.

The upstream address has been modified.

Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-24 19:34:49 -08:00
Yi Zhao
af6f068632 ebtables: do not install /etc/ethertypes
The /etc/ethertypes is provided by netbase since 6.0[1].
Do not instal the file in ebtables, otherwise there would be a conflict:
Error: Transaction test error:
  file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64

[1] 316680c6a2

Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-12-16 12:03:57 -08:00
Zang Ruochen
f604ed19d2 nftables: upgrade 0.9.6 -> 0.9.7
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:52 -08:00
Zang Ruochen
b18b12e549 libnftnl: upgrade 1.1.7 -> 1.1.8
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-11-02 09:00:51 -08:00
Zang Ruochen
683066f9e7 arno-iptables-firewall: upgrade 2.1.0 -> 2.1.1
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-09-25 08:41:40 -07:00
Zang Ruochen
b0d884a994 nftables: upgrade 0.9.5 -> 0.9.6
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-30 07:58:37 -07:00
Pierre-Jean Texier
bf1ac503e8 nftables: upgrade 0.9.4 -> 0.9.5
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-08 22:00:37 -07:00
Pierre-Jean Texier
9e7912b8fd libnftnl: upgrade 1.1.6 -> 1.1.7
See https://lwn.net/Articles/822353/

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-06-08 22:00:37 -07:00
Wang Mingyu
1356055ce7 conntrack-tools: upgrade 1.4.5 -> 1.4.6
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08 08:15:03 -07:00
Wang Mingyu
ed94a56d91 libnetfilter-conntrack: upgrade 1.0.7 -> 1.0.8
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08 08:15:03 -07:00
Pierre-Jean Texier
519b86c549 nftables: upgrade 0.9.3 -> 0.9.4
See https://lwn.net/Articles/816528/

Also remove patch applied upstream

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-03 14:45:54 -07:00
Pierre-Jean Texier
fbebf1bb0a libnftnl: upgrade 1.1.5 -> 1.1.6
This includes the following changes:

ac0778e build: libnftnl 1.1.6 release
60e6d9b include: update nf_tables.h.
c8cc25b Revert "bitwise: add support for passing mask and xor via registers."
4bf470b expr: nat: snprint flags in hexadecimal
ff92868 expr: masq: revisit _snprintf()
c76d36a set: support for NFTNL_SET_EXPR
9270557 set_elem: missing set and build for NFTNL_SET_ELEM_EXPR
4c8abad chain: add NFTNL_CHAIN_FLAGS
75b8778 bitwise: add support for passing mask and xor via registers.
8db0a94 include: update nf_tables.h.
7b4848c tests: bitwise: fix error message.
ec3622b src: add nftnl_*_{get,set}_array()
629ee38 src: Fix for reading garbage in nftnl_chain getters
04cc28d set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END
7cd41b5 set: Add support for NFTA_SET_DESC_CONCAT attributes
131a6c2 include: resync nf_tables.h cache copy
8fa63d7 bitwise: add support for left- and right-shifts.
3f232d7 bitwise: add support for new netlink attributes.
3fb5640 include: update nf_tables.h.
154104a bitwise: add helper to print boolean expressions.
66d6afb bitwise: fix some incorrect indentation.
35bac9a Update gitignore.
325cb6f include: Remove buffer.h
6079297 expr: meta: add slave device matching
7e15d9d udata: support for TLV attribute nesting
7f72b5c udata: add NFTNL_UDATA_SET_*TYPEOF* definitions
d16abf7 include: typo in object.h C++ wrapper
dfe3828 examples: Replace use of deprecated symbols
d95a703 chain: Correctly check realloc() call
835d645 flowtable: Correctly check realloc() call
32a8c5f chain: Fix memleak in error path of nftnl_chain_parse_devs()
ba1b025 flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs()
b238876 tests: flowtable: Don't check NFTNL_FLOWTABLE_SIZE

Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-03 14:45:54 -07:00
Wang Mingyu
ead91f0279 arno-iptables-firewall: upgrade 2.0.3 -> 2.1.0
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06 19:22:26 -08:00
Khem Raj
e919c1d508 nftables: Package python scripts into nonarch libdir
Helps fixing packaging errors on mulilib builds

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20 16:07:50 -08:00
Alex Kiernan
b2058e0507 nftables: Expand PACKAGECONFIG, cleanup build
Fill out PACKAGECONFIG options for json, mini-gmp, readline and xtables
whilst matching existing behaviour. Drop PACKAGECONFIG to weak default.

Fix upstream version matching so the very old 0.099 is rejected as the
newest version.

Drop seemingly redundant ASNEEDED which was added in 5477d5bcb7
("nftables: Upgrade to 0.7") without explanation.

Package python files from libdir not libdir_native; whilst they're the
same thing, building a target package with native variables is odd.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-17 18:44:24 -08:00
Todd Cunningham
906efee427 nftables: upgrade 0.9.2 -> 0.9.3
New patch:
    0001-update-python3-nftables-reference.patch

Signed-off-by: Todd Cunningham <tcunningham07@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-16 08:38:35 -08:00
Todd Cunningham
9625a375ee libnftnl: upgrade 1.1.4 -> 1.1.5
Remove obselete patch:
    0001-Move-exports-before-symbol-definition.patch
Refresh patch:
    0002-avoid-naming-local-function-as-one-of-printf-family.patch
Add one new file in this patch:
    src/obj/synproxy.c

Signed-off-by: Todd Cunningham <tcunningham07@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-13 18:29:14 -08:00
Alex Kiernan
ab86dcdc90 nftables: Fix documentation generation
Switch PACKAGECONFIG from man to manpages so we are included when
api-documentation is set. Ensure correct tools are available to build
the documentation and avoid unsupported option failures by not passing
`--enable-man-doc`.

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-03 09:31:53 -08:00
Oleksandr Kravchuk
2196272e89 nftables: update to 0.9.2
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-27 12:11:16 -07:00
Yuan Chao
38d83cfd0c libnftnl: upgrade 1.1.3 -> 1.1.4
Refresh patch:
    0002-avoid-naming-local-function-as-one-of-printf-family.patch
Add two new file in this patch:
    src/expr/synproxy.c
    src/obj/ct_expect.c

Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-20 21:11:27 -07:00
Mariano Lopez
a8f362deb3 nftables: 0.9.0 > 0.9.1
The upgrade includes a new python library, therefore added the
{PN}-python package.

Signed-off-by: Mariano López <just.another.mariano@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-23 18:39:29 -07:00
Khem Raj
ed399faf31 arno-iptables-firewall: Switch to git fetcher
github archives are not reliable
Fixes
arno-iptables-firewall-2.0.3: https://github.com/arno-iptables-firewall/aif/archive/2.0.3.tar.gz: SRC_URI uses unstable GitHub archives [src-uri-bad]

Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21 09:40:20 -07:00
Oleksandr Kravchuk
8f114fa881 libnftnl: update to 1.1.3
Updated libnftnl to 1.1.3 and refreshed patches.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-13 23:28:06 -07:00
Oleksandr Kravchuk
9860cda823 conntrack-tools: update to 1.4.5
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10 14:10:13 -07:00
Oleksandr Kravchuk
d703b5984e libnetfilter-conntrack: update to 1.0.7
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10 09:17:08 -07:00
Oleksandr Kravchuk
7f887ee74b libnetfilter-queue: fix update to 1.0.3
SRC_URI was mistakenly not updated in @57967659f4724a8b614f.

Removed patch was upstreamed. Another one was refreshed with devtool.

Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-08 00:28:05 -07:00
Oleksandr Kravchuk
7832621d1c ebtables: add UPSTREAM_CHECK_URI
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-06 08:32:04 -07:00
Oleksandr Kravchuk
b99b30f034 arno-iptables-firewall: update to 2.0.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-05 23:22:39 -07:00
Oleksandr Kravchuk
57967659f4 libnetfilter-queue: update to 1.0.3
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:57 -07:00
Oleksandr Kravchuk
d96b0bd015 nftables: add UPSTREAM_CHECK_URI
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:56 -07:00
Oleksandr Kravchuk
7c43284cd2 nfacct: add UPSTREAM_CHECK_URI
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29 10:13:56 -07:00
Alex Kiernan
a445b3bca4 nftables: Upgrade to 0.9.0
Drop all the backports as they're upstream

Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12 10:04:31 -08:00
Alex Kiernan
cb9b98f69b libnftnl: Upgrade to 1.1.1
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12 10:04:31 -08:00
Martin Jansa
15a8a49e03 nftables: add dependency on bison-native
* fixes:
checking whether yytext is a pointer... no
checking for bison... no
checking for byacc... no
*** Error: No suitable bison/yacc found. ***
    Please install the 'bison' package.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-08-19 17:10:27 -04:00