Attachment 828986 Details for Bug 1034494 – Proposed patch

[patch] Proposed patch

0001-Ship-default-etc-sysconfig-ip-6-tables-rules-in-serv.patch (text/plain), 3.56 KB, created by Adam Tkac on 2013-11-26 00:20:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Tkac

Created: 2013-11-26 00:20:43 UTC

Size: 3.56 KB

patch

obsolete

>From dbbe02f11942de8b63ba45d4cab490f047c92acd Mon Sep 17 00:00:00 2001
>From: Adam Tkac <vonsch@gmail.com>
>Date: Tue, 26 Nov 2013 01:10:07 +0100
>Subject: [PATCH] Ship default /etc/sysconfig/ip{,6}tables rules in -services
> subpkg
>
>Signed-off-by: Adam Tkac <vonsch@gmail.com>
>---
> ip6tables.sysconfig | 13 +++++++++++++
> iptables.spec       | 11 ++++++++++-
> iptables.sysconfig  | 13 +++++++++++++
> 3 files changed, 36 insertions(+), 1 deletion(-)
> create mode 100644 ip6tables.sysconfig
> create mode 100644 iptables.sysconfig
>
>diff --git a/ip6tables.sysconfig b/ip6tables.sysconfig
>new file mode 100644
>index 0000000..273ca7a
>--- /dev/null
>+++ b/ip6tables.sysconfig
>@@ -0,0 +1,13 @@
>+# Generated by ip6tables-save v1.4.18 on Tue Nov 26 00:56:16 2013
>+*filter
>+:INPUT ACCEPT [0:0]
>+:FORWARD ACCEPT [0:0]
>+:OUTPUT ACCEPT [0:0]
>+-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>+-A INPUT -p ipv6-icmp -j ACCEPT
>+-A INPUT -i lo -j ACCEPT
>+-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
>+-A INPUT -j REJECT --reject-with icmp6-adm-prohibited
>+-A FORWARD -j REJECT --reject-with icmp6-adm-prohibited
>+COMMIT
>+# Completed on Tue Nov 26 00:56:16 2013
>diff --git a/iptables.spec b/iptables.spec
>index 4d10718..8861130 100644
>--- a/iptables.spec
>+++ b/iptables.spec
>@@ -25,12 +25,14 @@
> Name: iptables
> Summary: Tools for managing Linux kernel packet filtering capabilities
> Version: 1.4.19.1
>-Release: 1%{?dist}
>+Release: 2%{?dist}
> Source: http://www.netfilter.org/projects/iptables/files/%{name}-%{version}.tar.bz2
> Source1: iptables.init
> Source2: iptables-config
> Source3: iptables.service
> Source4: iptables.save-legacy
>+Source5: iptables.sysconfig
>+Source6: ip6tables.sysconfig
> Group: System Environment/Base
> URL: http://www.netfilter.org/
> BuildRoot: %(mktemp -ud %{_tmppath}/%{name}-%{version}-%{release}-XXXXXX)
>@@ -150,6 +152,8 @@ install -d -m 755 %{buildroot}/etc/sysconfig
> install -c -m 755 %{SOURCE2} %{buildroot}/etc/sysconfig/iptables-config
> sed -e 's;iptables;ip6tables;g' -e 's;IPTABLES;IP6TABLES;g' < %{SOURCE2} > ip6tables-config
> install -c -m 755 ip6tables-config %{buildroot}/etc/sysconfig/ip6tables-config
>+install -c -m 600 %{SOURCE5} %{buildroot}/etc/sysconfig/iptables
>+install -c -m 600 %{SOURCE6} %{buildroot}/etc/sysconfig/ip6tables
> 
> %if %{with systemd}
> # install systemd service files
>@@ -286,6 +290,8 @@ fi
> %files services
> %attr(0755,root,root) %{script_path}/iptables.init
> %attr(0755,root,root) %{script_path}/ip6tables.init
>+%config(noreplace) %attr(0600,root,root) /etc/sysconfig/iptables
>+%config(noreplace) %attr(0600,root,root) /etc/sysconfig/ip6tables
> %if %{with systemd}
> %dir %{script_path}
> %{_unitdir}/iptables.service
>@@ -303,6 +309,9 @@ fi
> 
> 
> %changelog
>+* Tue Nov 26 2013 Adam Tkac <vonsch@gmail.com> 1.4.19.1-2
>+- ship default /etc/sysconfig/ip{,6}tables rules in -services subpkg
>+
> * Wed Jul 31 2013 Thomas Woerner <twoerner@redhat.com> 1.4.19.1-1
> - new version 1.4.19.1
>   - libxt_NFQUEUE: fix bypass option documentation
>diff --git a/iptables.sysconfig b/iptables.sysconfig
>new file mode 100644
>index 0000000..1cf31dc
>--- /dev/null
>+++ b/iptables.sysconfig
>@@ -0,0 +1,13 @@
>+# Generated by iptables-save v1.4.18 on Tue Nov 26 00:50:19 2013
>+*filter
>+:INPUT ACCEPT [0:0]
>+:FORWARD ACCEPT [0:0]
>+:OUTPUT ACCEPT [0:0]
>+-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
>+-A INPUT -p icmp -j ACCEPT
>+-A INPUT -i lo -j ACCEPT
>+-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
>+-A INPUT -j REJECT --reject-with icmp-host-prohibited
>+-A FORWARD -j REJECT --reject-with icmp-host-prohibited
>+COMMIT
>+# Completed on Tue Nov 26 00:50:19 2013
>-- 
>1.8.3.1
>

Actions: View | Diff

Attachments on bug 1034494: 828986