New firewalld release 0.4.2
- New module to search for and change ifcfg files for interfaces not under control of NM - firewall_config: Enhanced messages in status bar - firewall-config: New message window as overlay if not connected - firewall-config: Fix sentivity of option, view menus and main paned if not connected - firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls, some cleanup - firewall-[offline]cmd: Show target in zone information - D-Bus: Completed masquerade methods in FirewallClientZoneSettings - Fixed log-denied rules for icmp-blocks - Keep sorting of interfaces, services, icmp-blocks and other settings in zones - Fixed runtime-to-permanent not to save interfaces under control of NM - New icmp-block-inversion flag in the zones - ICMP type filtering in the zones - New services: sip, sips, managesieve - rich rules: Allow destination action (RHBZ#1163428) - firewall-offline-cmd: New option -q/--quiet - firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file - firewall-[offline-]cmd: Fix option for setting the destination address - firewall-config: Fixed resizing behaviour - New transaction model for speed ups in start, restart, stop and other actions - firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults - Fixed memory leak in dbus_introspection_add_properties - Landscape.io fixes, pylint calm downs - New D-Bus getXnames methods to speed up firewall-config and firewall-cmd - ebtables-restore: No support for COMMIT command - Source port support in services, zones and rich rules - firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets - firewall-config: New active bindings side bar for simple binding changes - Reworked NetworkManager module - Proper default zone handling for NM connections - Try to set zone binding with NM if interface is under control of NM - Code cleanup and bug fixes - Include test suite in the release and install in /usr/share/firewalld/tests - New Travis-CI configuration file - Fixed more broken frensh translations - Translation updates Changes from 0.4.1 - Fixed ebtables-restore does not support the COMMIT command issue - Fixed translations with python3 - Fixed exception for failed NM import, new doc string - Make ipsets visible per default in firewall-config - Install new fw_nm module - Do not fail if log file could not be opened - Fixed broken fr translation - Enhancements of ipset handling - No cleanup of ipsets using timeouts while reloading - Only destroy conflicting ipsets - Only use ipset types supported by the system - Add and remove several ipset entries in one call using a file - Reduce time frame where builtin chains are on policy DROP while reloading - Include descriptions in --info-X calls - Command line interface support to get and alter descriptions of zones, services, ipsets and icmptypes with permanent option - Properly watch changes in combined zones - Fix logging in rich rule forward rules - Transformed direct.passthrough errors into warnings - Rework of import structures - Reduced calls to get ids for port and protocol names (RHBZ#1305434) - Build and installation fixes by Markos Chandras - Provide D-Bus properties in introspection data - Fix for flaws found by landscape.io - Fix for repeated SUGHUP - New NetworkManager module to get and set zones of connections, used in firewall-applet and firewall-config - configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset) - Code cleanups - Bug fixes
This commit is contained in:
parent
e253f94325
commit
236e6ea831
3
.gitignore
vendored
3
.gitignore
vendored
@ -35,3 +35,6 @@
|
|||||||
/firewalld-0.3.14.1.tar.bz2
|
/firewalld-0.3.14.1.tar.bz2
|
||||||
/firewalld-0.3.14.2.tar.bz2
|
/firewalld-0.3.14.2.tar.bz2
|
||||||
/firewalld-0.4.0.tar.bz2
|
/firewalld-0.4.0.tar.bz2
|
||||||
|
/firewalld-0.4.1.tar.bz2
|
||||||
|
/firewalld-0.4.1.2.tar.bz2
|
||||||
|
/firewalld-0.4.2.tar.bz2
|
||||||
|
@ -7,8 +7,8 @@
|
|||||||
|
|
||||||
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
|
Summary: A firewall daemon with D-Bus interface providing a dynamic firewall
|
||||||
Name: firewalld
|
Name: firewalld
|
||||||
Version: 0.4.0
|
Version: 0.4.2
|
||||||
Release: 2%{?dist}
|
Release: 1%{?dist}
|
||||||
URL: http://www.firewalld.org
|
URL: http://www.firewalld.org
|
||||||
License: GPLv2+
|
License: GPLv2+
|
||||||
Source0: https://fedorahosted.org/released/firewalld/%{name}-%{version}.tar.bz2
|
Source0: https://fedorahosted.org/released/firewalld/%{name}-%{version}.tar.bz2
|
||||||
@ -18,7 +18,6 @@ Source2: FedoraWorkstation.xml
|
|||||||
%endif
|
%endif
|
||||||
%if 0%{?fedora}
|
%if 0%{?fedora}
|
||||||
Patch0: firewalld-0.2.6-MDNS-default.patch
|
Patch0: firewalld-0.2.6-MDNS-default.patch
|
||||||
Patch1: firewalld-0.4.0-tempdir_RHBZ1305175.patch
|
|
||||||
%endif
|
%endif
|
||||||
BuildArch: noarch
|
BuildArch: noarch
|
||||||
BuildRequires: desktop-file-utils
|
BuildRequires: desktop-file-utils
|
||||||
@ -29,6 +28,7 @@ BuildRequires: glib2, glib2-devel
|
|||||||
BuildRequires: systemd-units
|
BuildRequires: systemd-units
|
||||||
BuildRequires: docbook-style-xsl
|
BuildRequires: docbook-style-xsl
|
||||||
BuildRequires: python2-devel
|
BuildRequires: python2-devel
|
||||||
|
BuildRequires: iptables, ebtables, ipset
|
||||||
%if 0%{?with_python3}
|
%if 0%{?with_python3}
|
||||||
BuildRequires: python3-devel
|
BuildRequires: python3-devel
|
||||||
%endif #0%{?with_python3}
|
%endif #0%{?with_python3}
|
||||||
@ -173,7 +173,6 @@ Workstation product specific firewalld configuration settings.
|
|||||||
%setup -q
|
%setup -q
|
||||||
%if 0%{?fedora}
|
%if 0%{?fedora}
|
||||||
%patch0 -p1
|
%patch0 -p1
|
||||||
%patch1 -p1
|
|
||||||
%endif
|
%endif
|
||||||
|
|
||||||
%if 0%{?with_python3}
|
%if 0%{?with_python3}
|
||||||
@ -388,6 +387,9 @@ fi
|
|||||||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/icmptypes
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/icmptypes
|
||||||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/services
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/services
|
||||||
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/zones
|
%attr(0750,root,root) %dir %{_sysconfdir}/firewalld/zones
|
||||||
|
%dir %{_datadir}/firewalld
|
||||||
|
%dir %{_datadir}/firewalld/tests
|
||||||
|
%{_datadir}/firewalld/tests
|
||||||
%defattr(0644,root,root)
|
%defattr(0644,root,root)
|
||||||
%config(noreplace) %{_sysconfdir}/sysconfig/firewalld
|
%config(noreplace) %{_sysconfdir}/sysconfig/firewalld
|
||||||
%{_unitdir}/firewalld.service
|
%{_unitdir}/firewalld.service
|
||||||
@ -462,6 +464,7 @@ fi
|
|||||||
%defattr(0644,root,root)
|
%defattr(0644,root,root)
|
||||||
%{_datadir}/firewalld/firewall-config.glade
|
%{_datadir}/firewalld/firewall-config.glade
|
||||||
%{_datadir}/firewalld/gtk3_chooserbutton.py*
|
%{_datadir}/firewalld/gtk3_chooserbutton.py*
|
||||||
|
%{_datadir}/firewalld/gtk3_niceexpander.py*
|
||||||
%{_datadir}/applications/firewall-config.desktop
|
%{_datadir}/applications/firewall-config.desktop
|
||||||
%{_datadir}/appdata/firewall-config.appdata.xml
|
%{_datadir}/appdata/firewall-config.appdata.xml
|
||||||
%{_datadir}/icons/hicolor/*/apps/firewall-config*.*
|
%{_datadir}/icons/hicolor/*/apps/firewall-config*.*
|
||||||
@ -486,6 +489,81 @@ fi
|
|||||||
%endif
|
%endif
|
||||||
|
|
||||||
%changelog
|
%changelog
|
||||||
|
* Mon May 30 2016 Thomas Woerner <twoerner@redhat.com> - 0.4.2-1
|
||||||
|
- New module to search for and change ifcfg files for interfaces not under
|
||||||
|
control of NM
|
||||||
|
- firewall_config: Enhanced messages in status bar
|
||||||
|
- firewall-config: New message window as overlay if not connected
|
||||||
|
- firewall-config: Fix sentivity of option, view menus and main paned if not
|
||||||
|
connected
|
||||||
|
- firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls, some cleanup
|
||||||
|
- firewall-[offline]cmd: Show target in zone information
|
||||||
|
- D-Bus: Completed masquerade methods in FirewallClientZoneSettings
|
||||||
|
- Fixed log-denied rules for icmp-blocks
|
||||||
|
- Keep sorting of interfaces, services, icmp-blocks and other settings in zones
|
||||||
|
- Fixed runtime-to-permanent not to save interfaces under control of NM
|
||||||
|
- New icmp-block-inversion flag in the zones
|
||||||
|
- ICMP type filtering in the zones
|
||||||
|
- New services: sip, sips, managesieve
|
||||||
|
- rich rules: Allow destination action (RHBZ#1163428)
|
||||||
|
- firewall-offline-cmd: New option -q/--quiet
|
||||||
|
- firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file
|
||||||
|
- firewall-[offline-]cmd: Fix option for setting the destination address
|
||||||
|
- firewall-config: Fixed resizing behaviour
|
||||||
|
- New transaction model for speed ups in start, restart, stop and other actions
|
||||||
|
- firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults
|
||||||
|
- Fixed memory leak in dbus_introspection_add_properties
|
||||||
|
- Landscape.io fixes, pylint calm downs
|
||||||
|
- New D-Bus getXnames methods to speed up firewall-config and firewall-cmd
|
||||||
|
- ebtables-restore: No support for COMMIT command
|
||||||
|
- Source port support in services, zones and rich rules
|
||||||
|
- firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets
|
||||||
|
- firewall-config: New active bindings side bar for simple binding changes
|
||||||
|
- Reworked NetworkManager module
|
||||||
|
- Proper default zone handling for NM connections
|
||||||
|
- Try to set zone binding with NM if interface is under control of NM
|
||||||
|
- Code cleanup and bug fixes
|
||||||
|
- Include test suite in the release and install in /usr/share/firewalld/tests
|
||||||
|
- New Travis-CI configuration file
|
||||||
|
- Fixed more broken frensh translations
|
||||||
|
- Translation updates
|
||||||
|
|
||||||
|
* Mon May 9 2016 Thomas Woerner <twoerner@redhat.com> - 0.4.1.2-2
|
||||||
|
- Fixed ebtables-restore does not support the COMMIT command issue
|
||||||
|
|
||||||
|
* Wed Apr 20 2016 Thomas Woerner <twoerner@redhat.com> - 0.4.1.2-1
|
||||||
|
- Fixed translations with python3
|
||||||
|
- Fixed exception for failed NM import, new doc string
|
||||||
|
- Make ipsets visible per default in firewall-config
|
||||||
|
- Install new fw_nm module
|
||||||
|
- Do not fail if log file could not be opened
|
||||||
|
- Fixed broken fr translation
|
||||||
|
|
||||||
|
* Tue Apr 19 2016 Thomas Woerner <twoerner@redhat.com> - 0.4.1-1
|
||||||
|
- Enhancements of ipset handling
|
||||||
|
- No cleanup of ipsets using timeouts while reloading
|
||||||
|
- Only destroy conflicting ipsets
|
||||||
|
- Only use ipset types supported by the system
|
||||||
|
- Add and remove several ipset entries in one call using a file
|
||||||
|
- Reduce time frame where builtin chains are on policy DROP while reloading
|
||||||
|
- Include descriptions in --info-X calls
|
||||||
|
- Command line interface support to get and alter descriptions of zones,
|
||||||
|
services, ipsets and icmptypes with permanent option
|
||||||
|
- Properly watch changes in combined zones
|
||||||
|
- Fix logging in rich rule forward rules
|
||||||
|
- Transformed direct.passthrough errors into warnings
|
||||||
|
- Rework of import structures
|
||||||
|
- Reduced calls to get ids for port and protocol names (RHBZ#1305434)
|
||||||
|
- Build and installation fixes by Markos Chandras
|
||||||
|
- Provide D-Bus properties in introspection data
|
||||||
|
- Fix for flaws found by landscape.io
|
||||||
|
- Fix for repeated SUGHUP
|
||||||
|
- New NetworkManager module to get and set zones of connections, used in
|
||||||
|
firewall-applet and firewall-config
|
||||||
|
- configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)
|
||||||
|
- Code cleanups
|
||||||
|
- Bug fixes
|
||||||
|
|
||||||
* Mon Feb 08 2016 Jiri Popelka <jpopelka@redhat.com> - 0.4.0-2
|
* Mon Feb 08 2016 Jiri Popelka <jpopelka@redhat.com> - 0.4.0-2
|
||||||
- Make sure tempdir is created even in offline mode. (RHBZ#1305175)
|
- Make sure tempdir is created even in offline mode. (RHBZ#1305175)
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user