conntrack-tools-vl.spec 11 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329
  1. %bcond_with systemd
  2. %undefine _hardened_build
  3. Summary: Manipulate netfilter connection tracking table and run High Availability
  4. Name: conntrack-tools
  5. Version: 1.4.6
  6. Release: 1%{?_dist_release}
  7. Group: admin-tools,network
  8. Vendor: Project Vine
  9. Distribution: Vine Linux
  10. License: GPLv2
  11. URL: http://conntrack-tools.netfilter.org/
  12. Source0: http://netfilter.org/projects/%{name}/files/%{name}-%{version}.tar.bz2
  13. Source1: conntrackd.service
  14. Source2: conntrackd.conf
  15. Source10: conntrackd.init
  16. Source11: conntrackd.sysconfig
  17. BuildRequires: gcc
  18. BuildRequires: libnfnetlink-devel >= 1.0.1, libnetfilter_conntrack-devel >= 1.0.7
  19. BuildRequires: libnetfilter_cttimeout-devel >= 1.0.0, libnetfilter_cthelper-devel >= 1.0.0
  20. BuildRequires: libmnl-devel >= 1.0.3, libnetfilter_queue-devel >= 1.0.2
  21. BuildRequires: libtirpc-devel
  22. BuildRequires: pkgconfig bison flex
  23. %if %{with systemd}
  24. BuildRequires: systemd systemd-devel
  25. Requires(post): systemd
  26. Requires(preun): systemd
  27. Requires(postun): systemd
  28. %else
  29. Requires(post): chkconfig
  30. Requires(preun): chkconfig initscripts
  31. Requires(postun): chkconfig initscripts
  32. %endif
  33. %description
  34. With conntrack-tools you can setup a High Availability cluster and
  35. synchronize conntrack state between multiple firewalls.
  36. The conntrack-tools package contains two programs:
  37. - conntrack: the command line interface to interact with the connection
  38. tracking system.
  39. - conntrackd: the connection tracking userspace daemon that can be used to
  40. deploy highly available GNU/Linux firewalls and collect
  41. statistics of the firewall use.
  42. conntrack is used to search, list, inspect and maintain the netfilter
  43. connection tracking subsystem of the Linux kernel.
  44. Using conntrack, you can dump a list of all (or a filtered selection of)
  45. currently tracked connections, delete connections from the state table,
  46. and even add new ones.
  47. In addition, you can also monitor connection tracking events, e.g.
  48. show an event message (one line) per newly established connection.
  49. %debug_package
  50. %prep
  51. %setup -q
  52. %build
  53. %configure \
  54. --disable-static \
  55. %if %{with systemd}
  56. --enable-systemd \
  57. %endif
  58. %{nil}
  59. sed -i "s/DEFAULT_INCLUDES = -I./DEFAULT_INCLUDES = -I. -I\/usr\/include\/tirpc/" src/helpers/Makefile
  60. CFLAGS="${CFLAGS} -Wl,-z,lazy"
  61. CXXFLAGS="${CXXFLAGS} -Wl,-z,lazy"
  62. %make_build
  63. chmod 644 doc/sync/primary-backup.sh
  64. rm -f doc/sync/notrack/conntrackd.conf.orig doc/sync/alarm/conntrackd.conf.orig doc/helper/conntrackd.conf.orig
  65. %install
  66. %make_install
  67. find %{buildroot} -type f -name "*.la" -exec rm -f {} ';'
  68. %if %{with systemd}
  69. install -d -m 0755 %{buildroot}%{_unitdir}
  70. install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/
  71. %else
  72. install -d -m 0755 %{buildroot}%{_initdir}
  73. install -m 0755 %{SOURCE10} %{buildroot}%{_initdir}/conntrackd
  74. install -d -m 0755 %{buildroot}%{_sysconfdir}/sysconfig
  75. install -m 0644 %{SOURCE11} %{buildroot}%{_sysconfdir}/sysconfig/conntrackd
  76. %endif
  77. mkdir -p %{buildroot}%{_sysconfdir}/conntrackd
  78. install -m 0644 %{SOURCE2} %{buildroot}%{_sysconfdir}/conntrackd/
  79. %post
  80. %if %{with systemd}
  81. %systemd_post conntrackd.service
  82. %else
  83. if [ $1 -eq 1 ]; then
  84. /sbin/chkconfig --add conntrackd
  85. fi
  86. %endif
  87. %preun
  88. %if %{with systemd}
  89. %systemd_preun conntrackd.service
  90. %else
  91. if [ $1 -eq 0 -o -x /bin/systemctl ]; then
  92. /sbin/service conntrackd stop ||:
  93. /sbin/chkconfig --del conntrackd
  94. fi
  95. %endif
  96. %postun
  97. %if %{with systemd}
  98. %systemd_postun conntrackd.service
  99. %else
  100. if [ $1 -ge 1 ]; then
  101. /sbin/service conntrackd condrestart
  102. fi
  103. %endif
  104. %files
  105. %license COPYING
  106. %doc AUTHORS TODO doc
  107. %dir %{_sysconfdir}/conntrackd
  108. %config(noreplace) %{_sysconfdir}/conntrackd/conntrackd.conf
  109. %if %{with systemd}
  110. %{_unitdir}/conntrackd.service
  111. %else
  112. %{_initdir}/conntrackd
  113. %{_sysconfdir}/sysconfig/conntrackd
  114. %endif
  115. %{_sbindir}/conntrack
  116. %{_sbindir}/conntrackd
  117. %{_sbindir}/nfct
  118. %{_mandir}/man5/*
  119. %{_mandir}/man8/*
  120. %dir %{_libdir}/conntrack-tools
  121. %{_libdir}/conntrack-tools/*
  122. %changelog
  123. * Mon Sep 28 2020 Tomohiro "Tomo-p" KATO <tomop@teamgedoh.net> - 1.4.6-1
  124. - new upstream release.
  125. - initial build for Vine Linux.
  126. * Mon Jul 27 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-6
  127. - Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
  128. * Tue Jan 28 2020 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-5
  129. - Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
  130. * Wed Jul 24 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-4
  131. - Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild
  132. * Thu Jan 31 2019 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.5-3
  133. - Rebuilt for https://fedoraproject.org/wiki/Fedora_30_Mass_Rebuild
  134. * Fri Dec 14 2018 Paul Wouters <pwouters@redhat.com> - 1.4.5-2
  135. - Disable hardened build to really fix rhbz#1413408
  136. * Mon Dec 10 2018 Paul Wouters <pwouters@redhat.com> - 1.4.5-1
  137. - Resolves: rhbz#1574091 conntrack-tools-1.4.5 is available
  138. - Resolves: rhbz#1413408 ct_helper_ftp not working
  139. (I've reduced the hardening to use -z,lazy)
  140. - Eanbled systemd support
  141. - Bumped required libnetfilter_conntrack-devel to 1.0.7
  142. - fixup harmless but broken mkdir in spec file
  143. - Don't override CPPFLAGS and LIBS, instead fixup src/helpers/Makefile
  144. * Thu Jul 12 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-8
  145. - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
  146. * Thu Apr 12 2018 Orion Poplawski <orion@nwra.com> - 1.4.4-7
  147. - Use libtirpc
  148. - Use %%license
  149. * Wed Feb 07 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-6
  150. - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
  151. * Wed Aug 02 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-5
  152. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
  153. * Wed Jul 26 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-4
  154. - Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
  155. * Wed Feb 22 2017 Paul Wouters <pwouters@redhat.com> - 1.4.4-3
  156. - Add upstream patches (free pktb after use, nat_tuple leak)
  157. * Fri Feb 10 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.4-2
  158. - Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
  159. * Thu Sep 22 2016 Paul Wouters <pwouters@redhat.com> - 1.4.4-1
  160. - Updated to 1.4.4 (rhbz#1370668)
  161. - Include new man5 pages
  162. * Wed Apr 20 2016 Paul Wouters <pwouters@redhat.com> - 1.4.3-1
  163. - Resolves: rhbz#1261220 1.4.3 is available
  164. - Update source url
  165. - Remove incorporated patches
  166. * Wed Feb 03 2016 Fedora Release Engineering <releng@fedoraproject.org> - 1.4.2-11
  167. - Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
  168. * Fri Aug 21 2015 Paul Wouters <pwouters@redhat.com> - 1.4.2-10
  169. - Resolves: 1255578 - conntrackd could neither be started nor be stopped
  170. * Tue Aug 18 2015 Paul Wouters <pwouters@redhat.com> - 1.4.2-9
  171. - Resolves: rhbz#CVE-2015-6496, rhbz#1253757
  172. - Fold in upstream patches since 1.4.2 release up to git 900d7e8
  173. - Fold in upstream patch set of 2015-08-18 for coverity issues
  174. * Wed Jun 17 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-8
  175. - Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
  176. * Mon Jan 12 2015 Paul Komkoff <i@stingr.net> - 1.4.2-7
  177. - bz#1181119 - wait for network to be on before starting conntrackd
  178. * Sun Jan 11 2015 Paul Komkoff <i@stingr.net> - 1.4.2-6
  179. - bz#998105 - remove patch residues from doc
  180. * Sat Aug 16 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-5
  181. - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
  182. * Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-4
  183. - Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
  184. * Sat Dec 21 2013 Paul Komkoff <i@stingr.net> - 1.4.2-3
  185. - rebuilt
  186. * Sat Sep 7 2013 Paul P. Komkoff Jr <i@stingr.net> - 1.4.2-2
  187. - bz#850067
  188. * Sat Sep 7 2013 Paul P. Komkoff Jr <i@stingr.net> - 1.4.2-1
  189. - new upstream version
  190. * Sat Aug 03 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.0-3
  191. - Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild
  192. * Fri Feb 08 2013 Paul Komkoff <i@stingr.net> - 1.4.0-2
  193. - fix bz#909128
  194. * Mon Nov 26 2012 Paul P. Komkoff Jr <i@stingr.net> - 1.4.0-1
  195. - new upstream version
  196. * Tue Jul 24 2012 Paul P. Komkoff Jr <i@stingr.net> - 1.2.1
  197. - new upstream version
  198. * Wed Jul 18 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.1-2
  199. - Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
  200. * Mon May 07 2012 Paul Wouters <pwouters@redhat.com> - 1.0.1-1
  201. - Updated to 1.0.1
  202. - Added daemon using systemd and configuration file
  203. - Removed legacy spec requirements
  204. - Patch for: parse.c:240:34: error: 'NULL' undeclared
  205. * Thu Jan 12 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0.0-2
  206. - Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
  207. * Thu May 5 2011 Paul P. Komkoff Jr <i@stingr.net> - 1.0.0
  208. - new upstream version
  209. * Wed Feb 09 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.15-2
  210. - Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
  211. * Fri Nov 19 2010 Paul P. Komkoff Jr <i@stingr.net> - 0.9.15-1
  212. - new upstream version
  213. * Thu Mar 25 2010 Paul P. Komkoff Jr <i@stingr.net> - 0.9.14-1
  214. - update, at last
  215. * Tue Nov 10 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.13-2
  216. - failed to properly commit the package :(
  217. * Tue Oct 13 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.13-1
  218. - new upstream version
  219. * Fri Jul 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.12-4
  220. - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
  221. * Sun May 24 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.12-3
  222. - new upstream version
  223. * Sun May 24 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.12-2
  224. - versioning screwup
  225. * Sun May 24 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.12-1
  226. - new upstream version
  227. * Tue Feb 24 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.9.9-2
  228. - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
  229. * Tue Jan 13 2009 Paul P. Komkoff Jr <i@stingr.net> - 0.9.9-1
  230. - new upstream version
  231. * Sun Oct 26 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.8-1
  232. - new upstream version
  233. - remove rollup patch
  234. * Wed Jul 16 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.7-2
  235. - fix Patch0/%%patch.
  236. * Wed Jul 16 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.7-1
  237. - new upstream version
  238. * Sat Feb 23 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.6-0.1.svn7382
  239. - new version from svn
  240. * Fri Feb 22 2008 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-5
  241. - fix the PATH_MAX-related compilation problem
  242. * Tue Feb 19 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 0.9.5-4
  243. - Autorebuild for GCC 4.3
  244. * Tue Oct 23 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-3
  245. - review fixes
  246. * Sun Oct 21 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-2
  247. - review fixes
  248. * Fri Oct 19 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.5-1
  249. - new upstream version
  250. * Sun Jul 22 2007 Paul P. Komkoff Jr <i@stingr.net> - 0.9.4-1
  251. - replace conntrack with conntrack-tools