.../tags/3a3a4b658b5d150a3e7b6eecc33e9c899ddf314c | 12 + .gear/tags/list | 1 + configure.ac | 30 +-- ipset.spec | 251 +++++++++++++++++++++ 4 files changed, 279 insertions(+), 15 deletions(-) diff --git a/.gear/tags/3a3a4b658b5d150a3e7b6eecc33e9c899ddf314c b/.gear/tags/3a3a4b658b5d150a3e7b6eecc33e9c899ddf314c new file mode 100644 index 0000000..2296e5a --- /dev/null +++ b/.gear/tags/3a3a4b658b5d150a3e7b6eecc33e9c899ddf314c @@ -0,0 +1,12 @@ +object dc17ff3c6659a0393e6681abde9296059637f123 +type commit +tag v7.15 +tagger Jozsef Kadlecsik 1628057941 +0200 + +v7.15 +-----BEGIN PGP SIGNATURE----- + +iF0EABECAB0WIQS02sHrXUm3bI1+/m7WqOfPkkGW9gUCYQoxVwAKCRDWqOfPkkGW +9paYAJ4y5g/PfXE7OjtNWPf/SIGLyOxX+ACcCj0uXg/IoOjgXRb8EXIUpmgiJyI= +=FvGo +-----END PGP SIGNATURE----- diff --git a/.gear/tags/list b/.gear/tags/list new file mode 100644 index 0000000..a256456 --- /dev/null +++ b/.gear/tags/list @@ -0,0 +1 @@ +3a3a4b658b5d150a3e7b6eecc33e9c899ddf314c v7.15 diff --git a/configure.ac b/configure.ac index 1acc976..e16bedd 100644 --- a/configure.ac +++ b/configure.ac @@ -40,7 +40,7 @@ AC_ARG_WITH([ksource], [Path to kernel source directory, if not the same as the kernel build directory]), [KSOURCEDIR="$withval";]) AM_CONDITIONAL(WITH_KBUILDDIR, test "$KBUILDDIR" != "") -AC_SUBST(KBUILDDIR) +#AC_SUBST(KBUILDDIR) dnl ipset bash compspec - bash shell programmable completion AC_ARG_ENABLE([bashcompl], @@ -93,24 +93,24 @@ elif test -e "$kbuilddir/include/linux/netfilter/nfnetlink.h"; then else ksourcedir="/lib/modules/$(uname -r)/source" fi -if test ! -e "$ksourcedir/include/linux/netfilter/nfnetlink.h" -then - AC_MSG_ERROR([Invalid kernel source directory $ksourcedir]) -fi +#if test ! -e "$ksourcedir/include/linux/netfilter/nfnetlink.h" +#then +# AC_MSG_ERROR([Invalid kernel source directory $ksourcedir]) +#fi -if test ! -e "$kbuilddir/.config" -then - AC_MSG_ERROR([The kernel build directory $kbuilddir is not configured]) -fi +#if test ! -e "$kbuilddir/.config" +#then +# AC_MSG_ERROR([The kernel build directory $kbuilddir is not configured]) +#fi AC_PROG_GREP AC_PROG_AWK -if ! $GREP -q "NFNL_SUBSYS_IPSET" "$ksourcedir/include/linux/netfilter/nfnetlink.h" && \ - ! $GREP -q "NFNL_SUBSYS_IPSET" "$ksourcedir/include/uapi/linux/netfilter/nfnetlink.h"; -then - AC_MSG_ERROR([The kernel source directory $ksourcedir is not patched with netlink.patch to support ipset]) -fi +#if ! $GREP -q "NFNL_SUBSYS_IPSET" "$ksourcedir/include/linux/netfilter/nfnetlink.h" && \ +# ! $GREP -q "NFNL_SUBSYS_IPSET" "$ksourcedir/include/uapi/linux/netfilter/nfnetlink.h"; +#then +# AC_MSG_ERROR([The kernel source directory $ksourcedir is not patched with netlink.patch to support ipset]) +#fi fi dnl Maximal number of sets supported by the kernel, default 256 @@ -863,7 +863,7 @@ if test -f $ksourcedir/include/net/netns/generic.h && \ AC_MSG_RESULT(yes) else AC_MSG_RESULT(no) - AC_MSG_ERROR([Netns support is required in the Linux kernel tree]) +# AC_MSG_ERROR([Netns support is required in the Linux kernel tree]) fi fi diff --git a/ipset.spec b/ipset.spec new file mode 100644 index 0000000..5d2bccf --- /dev/null +++ b/ipset.spec @@ -0,0 +1,251 @@ +%define prefix / +%define exec_prefix / +%define _prefix / +%define soname 13 +Name: ipset +Version: 7.15 +Release: alt2 + +Summary: Tools for managing sets of IP or ports with iptables +License: GPLv2 +Group: System/Kernel and hardware +Url: http://ipset.netfilter.org/ + +Source: %name-%version.tar +Patch: %name-%version-alt.patch +BuildRequires: libmnl-devel + +%description +IP sets are a framework inside the Linux kernel, which can be administered +by the ipset utility. Depending on the type, currently an IP set may store IP +addresses, (TCP/UDP) port numbers or IP addresses with MAC addresses in a way, +which ensures lightning speed when matching an entry against a set. + +ipset may be the proper tool for you, if you want to + * store multiple IP addresses or port numbers and match against + the collection by iptables at one swoop; + * dynamically update iptables rules against IP addresses or ports + without performance penalty; + * express complex IP address and ports based rulesets with one single + iptables rule and benefit from the speed of IP sets + +%package -n lib%{name}%{soname} +Summary: Dynamic library for %name +License: LGPLv2+ +Group: Development/C + +%description -n lib%{name}%{soname} +The lib%{name}%{soname} package contains the dynamic libraries needed for +applications to use the %name framework. + +%package -n lib%{name}-devel +Summary: Header files for lin%name +License: LGPLv2+ +Group: Development/C +Requires: lib%{name}%{soname} = %version-%release + +%description -n lib%{name}-devel +The lib%{name}6 package contains the header files needed for +developing applications that need to use the %name framework libraries. + + +%package -n kernel-source-ipset +Summary: Linux ipset modules sources +License: GPLv2+ +Group: Development/Kernel +BuildArch: noarch +BuildPreReq: rpm-build-kernel + +%description -n kernel-source-ipset +Kernel source modules ipset. + +%prep +%setup +%patch -p1 + +%build +%autoreconf +%configure --with-kmod=no --enable-static=no +%make_build LIBDIR=/%_lib/ BINDIR=/sbin/ +%install +%makeinstall_std exec_prefix=/ sbindir=/sbin libdir=/%_lib pkgconfigdir=/%_pkgconfigdir +mkdir -p %buildroot%_libdir + +pushd %buildroot%_libdir +LIBNAME="$(basename $(ls %buildroot/%_lib/libipset.so.%{soname}.*.*))" +ln -s ../../%_lib/$LIBNAME libipset.so +popd + + +tar xvf %SOURCE0 +mv %name-%version kernel-source-%name-%version + +mkdir -p %kernel_srcdir +tar -cjf %kernel_srcdir/kernel-source-%name-%version.tar.bz2 kernel-source-%name-%version + +%files +%doc ChangeLog ChangeLog.ippool README +/sbin/* +%_man8dir/* + +%files -n lib%{name}%{soname} +%attr(755,root,root) /%_lib/libipset.so.%{soname}* + +%files -n lib%{name}-devel +%_includedir/lib%name/*.h +%_libdir/*.so +%_pkgconfigdir/*.pc +%_man3dir/* + +%files -n kernel-source-ipset +%attr(0644,root,root) %kernel_src/kernel-source-%name-%version.tar.bz2 + +%changelog +* Mon Sep 20 2021 Ilya Kurdyukov 7.15-alt2 +- fixed -flto (disabled static) + +* Tue Aug 10 2021 Anton Farygin 7.15-alt1 +- 7.15 + +* Thu Feb 25 2021 Anton Farygin 7.11-alt1 +- 7.11 + +* Fri Jan 01 2021 Anton Farygin 7.10-alt1 +- 7.10 + +* Sun Nov 08 2020 Michael Shigorin 7.6-alt2 +- srpm_cleanup related ftbfs fixup +- minor spec cleanup + +* Thu Mar 05 2020 Anton Farygin 7.6-alt1 +- 7.6 + +* Wed Jan 15 2020 Anton Farygin 7.5-alt1 +- 7.5 + +* Thu Nov 07 2019 Anton Farygin 7.4-alt1 +- 7.4 + +* Thu Aug 08 2019 Anton Farygin 7.3-alt1 +- 7.3 + +* Tue Jan 22 2019 Anton Farygin 7.1-alt1 +- 7.1 + +* Tue Nov 13 2018 Anton Farygin 7.0-alt1 +- 7.0 + +* Tue May 22 2018 Anton Farygin 6.38-alt1 +- 6.38 + +* Tue Jan 23 2018 Anton Farygin 6.35-alt1 +- new version + +* Mon Mar 13 2017 Anton Farygin 6.32-alt1 +- new version + +* Mon Mar 13 2017 Anton Farygin 6.32-alt1 +- new version + +* Thu Nov 24 2016 Anton Farygin 6.30-alt1 +- new version + +* Sun Oct 02 2016 Anton Farygin 6.29-alt3.git.caaa86 +- add pkgconfig files (closes: #32543) +- devel package renamed + +* Tue Jul 26 2016 Anton V. Boyarshinov 6.29-alt2.git.caaa86 +- updated for kernel 4.7 support + +* Tue Jun 28 2016 Anton Farygin 6.29-alt1 +- new version + +* Tue Sep 29 2015 Anton Farygin 6.26-alt1 +- new version + +* Wed Feb 11 2015 Anton Farygin 6.24-alt1 +- new version + +* Wed Sep 24 2014 Anton Farygin 6.23-alt1 +- new version + +* Mon Mar 24 2014 Anton Farygin 6.21.1-alt1 +- new version + +* Fri Nov 15 2013 Anton Farygin 6.20.1-alt3 +- repack kernel-source-package for new ipset modules build scheme + +* Wed Nov 13 2013 Anton Farygin 6.20.1-alt2 +- fixed buildrequires + +* Tue Nov 05 2013 Anton Farygin 6.20.1-alt1 +- new version + +* Tue Jun 25 2013 Anton Farygin 6.19-alt1 +- new version + +* Wed Jun 06 2012 Anton Farygin 6.12.1-alt1 +- new version + +* Mon Sep 19 2011 Anton Farygin 6.9.1-alt2 +- revert back kernel-source-ipset + +* Mon Sep 19 2011 Anton Farygin 6.9.1-alt1 +- new version + +* Tue Aug 02 2011 Anton Farygin 6.8-alt1 +- new version + +* Mon Apr 18 2011 Anton Farygin 4.5-alt1 +- new version + +* Wed Oct 13 2010 Anton Farygin 4.4-alt1 +- new version + +* Mon Sep 27 2010 Anton Farygin 4.3-alt1 +- new version +- build kernel-source from this package + +* Fri Mar 12 2010 Igor Zubkov 4.1-alt2 +- move binaries from /usr/sbin/ to /sbin/ and + libraries from /usr/lib/ to /lib/ + +* Wed Dec 23 2009 Igor Zubkov 4.1-alt1 +- 3.2 -> 4.1 + +* Sun Sep 13 2009 Igor Zubkov 3.2-alt1 +- 2.4.5 -> 3.2 + +* Tue Dec 02 2008 Igor Zubkov 2.4.5-alt1 +- 2.4.4 -> 2.4.5 + +* Sat Nov 15 2008 Igor Zubkov 2.4.4-alt1 +- 2.4.3 -> 2.4.4 + +* Sun Oct 26 2008 Igor Zubkov 2.4.3-alt1 +- 2.3.0 -> 2.4.3 + +* Wed Jul 09 2008 Igor Zubkov 2.3.0-alt1 +- 2.2.9 -> 2.3.0 +- update and cleanup kernel headers in package + +* Thu Jun 28 2007 Konstantin A. Lepikhov 2.2.9-alt1 +- rebuild for ALTLinux. +- fix link problem (tnx to ldv@ for simular fix in iptables). + +* Fri Aug 4 2006 Samir Bellabes 2.2.9-1mdv2007.0 +- new release. +- use mkrel tag +- include kernel headers in the package. + +* Wed Aug 31 2005 Couriousous 2.2.2-4mdk +- Fix plugin loading on x86_64 + +* Wed Aug 10 2005 Samir Bellabes 2.2.2-3mdk +- Fix missing PREFIX + +* Tue Aug 2 2005 Olivier Blin 2.2.2-2mdk +- fix libdir on x86_64 + +* Fri Jul 29 2005 Samir Bellabes 2.2.2-1mdk +- first release