Changelog for firewall-macros-0.5.3-77.1.noarch.rpm :
Mon May 14 14:00:00 2018 mchandrasAATTsuse.de
- Update to 0.5.3 (bsc#1093120)

* tests/regression: add test for ipset with timeout

* ipset: allow adding entries to ipsets with timeout

* translations: update

* helpers: load helper module explicitly if no port given

* helpers: nf_conntrack_proto-
* helpers needs name cropped

* config/Makefile: correct name of proto-gre helper

* tests/regression: test helper nf_conntrack_proto_gre (#263)

* functions: get_nf_nat_helpers() should look in other directories too

* functions: Allow nf_conntrack_proto_
* helpers

* services: Add GRE

* helpers: Add proto-gre

* tests/regression: add test to verify ICMP block in forward chain

* ipXtables: fix ICMP block not being present in FORWARD chain

Wed Apr 18 14:00:00 2018 sbrabecAATTsuse.com
- Translations update (bsc#1081623).

Fri Mar 16 13:00:00 2018 mchandrasAATTsuse.de
- Backport upstream patches to add additional services (bsc#1082033)

* firewalld-add-additional-services.patch

Tue Mar 13 13:00:00 2018 mchandrasAATTsuse.de
- Update to 0.5.2

* fix rule deduplication causing accidental removal of rules

* log failure to parse direct rules xml as an error

* firewall-config: Break infinite loop when firewalld is not running

* fix set-log-denied not taking effect

* po: update translations

Thu Feb 1 13:00:00 2018 mchandrasAATTsuse.de
- Remove high-availability service. SUSE HA uses the cluster service
provided by the yast2-cluster package (bsc#1078223)

Tue Jan 30 13:00:00 2018 mchandrasAATTsuse.de
- Update to 0.5.1

* ipXtables: fix iptables-restore wait option detection

* python3: use \"foo in dict\" not dict.has_key(foo)

* Fix potential python3 keys() incompatibility in watcher

* Fixed python3 compatibility

* ebtables: fix missing default value to set_rule()

* fw_zone: fix invalid reference to __icmp_block_inversion

* zones: Correct and defer check_name for combined zones

Fri Jan 26 13:00:00 2018 mchandrasAATTsuse.de
- Update to 0.5.0

* firewallctl: mark deprecated (gh#firewalld/firewalld##261)

* Add nmea-0183 service

* Add sycthing-gui service

* Add syncthing service

* Adding FirewallD jenkins service (gh#firewalld/firewalld#256)

* services/high-availability: Add port 9929

* Fix and improve firewalld-sysctls.conf

* firewalld: also reload dbus config interface for global options

* Add MongoDB service definition

* src: firewall: Add support for SUSE ifcfg scripts

* Add UPnP client service

* firewalld: Allow specifying log file location

* firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch

* 0001-suse-ifcfg-files.patch
- Drop tests installation

Thu Dec 21 13:00:00 2017 mchandrasAATTsuse.de
- Introduce new python3-firewall and firewall-macros subpackages.
The first one contains the firewalld python3 bindings and the second
one contains the RPM macros for firewalld.

Wed Nov 29 13:00:00 2017 dimstarAATTopensuse.org
- Replace dbus-1-python requires with dbus-1-python3: since
firewalld was migrated to python3, we also have to require the
python3 dependencies (boo#1070310).

Tue Nov 28 13:00:00 2017 mchandrasAATTsuse.de
- Add missing python3-gobject-Gdk dependency (boo#1069952)

Thu Nov 23 13:00:00 2017 rbrownAATTsuse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)

Sun Nov 19 13:00:00 2017 mpluskalAATTsuse.com
- Make sure to use python3 everywhere (boo#1068778)

Thu Nov 16 13:00:00 2017 mchandrasAATTsuse.de
- Add combined upstream patch to support SUSE ifcfg network files.

* 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)

Wed Nov 15 13:00:00 2017 mchandrasAATTsuse.de
- Update to version 0.4.4.6

* firewall.core.fw_config: Fix check for icmp builtin name

* config.services: docker-swarm: fix incorrect attribute

* xmlschema/service.xsd: Fix protocol looking for name instead of value

* Add docker swarm service (gh#firewalld/firewalld#230)

* Adding FirewallD redis service (gh#firewalld/firewalld#248)

* Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)

* firewall-offline-cmd: Don\'t require root for help output

* doc: firewall-cmd: Document --query-
* options return codes

* firewall-cmd: Use colors only if output is a TTY

* core: Log unsupported ICMP types as informational only

* add bgp service to predefined services edit to config/Makefile.am

* Add git service

* Add kprop service

* minidlna definitions (gh#firewalld/firewalld#236)

* SpiderOak ONE listens on port 21327 and 21328

* autogen.sh: Allow skipping configure via NOCONFIGURE env var

* Add missing ports to RH-Satellite-6 service

* Reload nf_conntrack sysctls after the module is loaded

* Add NFSv3 service.

* config/Makefile.am: Add murmur service (a95eed1)

* add new service IRC

* firewall.core.prog: Simplify runProg output: Combine stderr and stdout

* firewall.core.fw: Fix possible dict size change in for loop

* firewall.core.fw: Use new firewalld git repo in firewalld organization

* config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization

* firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family

* firewall.core.rich: Add checks for Rich_Source validation

* Handle also IPv6 with the zone masquerade flag

* Add IPv6 support for forward-ports in zones

* firewall.command: Enable parse_forward_port to work with IPv6 adresses

* firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports

* add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.

Wed Nov 8 13:00:00 2017 mpluskalAATTsuse.com
- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements

Tue Jun 6 14:00:00 2017 mchandrasAATTsuse.de
- Update to version 0.4.4.5

* firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)

* Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules

* firewall-cmd: Fix --{set,get}-{short,description} for zone

* firewall.core.ipXtables: Use new wait option for restore commands if available

* Adding ovirt-vmconsole service file

* Adding oVirt storage-console service.

* Adding ctdb service file.

* Adding service file for nrpe.

* Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)

* D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)

* firewall.core.fw_config: Fix wrong variable use in repr output

* firewall.core.fw_icmptype: Add missing import for copy

* firewall.core.fw_test: Fix wrong format string in repr

* firewall.core.io.zone: Fix getattr use on super(Zone)

* firewall.functions: New function get_nf_nat_helpers

* firewall.core.fw: Get NAT helpers and store them internally.

* firewall.core.fw_zone: Load NAT helpers with conntrack helpers

* firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers

* firewall.server.firewalld: New property for NAT helpers supported by the kernel

Mon Mar 27 14:00:00 2017 mchandrasAATTsuse.de
- Update to version 0.4.4.4

* Drop references to fedorahosted.org from spec file and Makefile.am

* firewall-config: Show invalid ipset type in the ipset dialog in the bad label

* firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env

* firewall.server.firewalld: Provide information about the supported icmp types

* firewall.core.fw_icmptype: Add ICMP type only if the type is supported

* firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types

* firewall.core.ipXtables: New method supported_icmp_types

* firewall-config: Deactivate edit buttons if there are no items

* firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)

* firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default

* firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:

* 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch

Mon Feb 13 13:00:00 2017 mchandrasAATTsuse.de
- Update to version 0.4.4.3

* New service freeipa-trust (rh#1411650)

* Complete icmp types for IPv4 and IPv6

* New h323 helper container

* Support helper container: h323

* firewall.server.decorators: ALREADY_ errors should be logged as warnings

* firewall.command: ALREADY_SET should also result in zero exit code

* tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd

* Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface

* New checks for ipset entry validation

* Use ipset dimension for match

* firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list

* New firewall.core.icmp providing names and types for icmp and icmpv6 values

* firewall.core.fw_ipset: New methods to get ipset dimension and applied state

* firewall.errors: New error NOT_APPLIED

* firewall-cmd man page: Add missing --get-ipset-types

* firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)

* firewall.core.prog: Fix addition of the error output in runProg

* Speed up ipset handling, (re)loading and import from file

* Support --family option for --new-ipset

* Handle FirewallError for query sequences in command line tools

* Fail to alter entries of ipsets with timeout

* Extended tests for ipset options

* Return empty list for ipsets using timeouts

* firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)

* firewalld.conf man page: New section about AutomaticHelpers

* firewall-offline-cmd man page: Added -v and -q options, fixed section ids

* firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface

* firewall.core.fw_zone: Limit masquerading forward rule to new connections

* firewall-config: Update active zones on reloaded signal

* firewall-applet: Update active zones and tooltip on reloaded signal

* firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)

* Support icmp-type usage in rich rules (rh#1409544)

* firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)

* firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests

* Speed up start and restart for ipsets with lots of entries (rh#1416817)

* Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)

* Code cleanup and minor bug fixes

* firewall.core.prog: Fix addition of the error output in runProg

* New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync

* Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)

* 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch

Mon Dec 5 13:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.4.2

* firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem

* firewall.core.fw_nm: create NMClient lazily

* Do not use hard-coded path for modinfo, use autofoo to detect it

* firewall.core.io.ifcfg: Dropped invalid option warning with bad format string

* firewall.core.io.ifcfg: Properly handle quoted ifcfg values

* firewall.core.fw_zone: Do not reset ZONE with ifdown

* Updated translations from zanata

* firewall-config: Extra grid at bottom to visualize firewalld settings

Mon Nov 14 13:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.4.1

* Translation updates form zanata

* firewallctl: New support for helpers

* firewallctl: Use sys.excepthook to force exception_handler usage always

* firewall-config: Use proper source check in sourceDialog

Mon Oct 31 13:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.4

* firewall-applet: Use PyQt5

* firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
D-Bus property

* New helpers Q.931 and RAS from nf_conntrack_h323

* firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table

* firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
table

* New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
sane, sip, snmp and tftp

* firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones

* firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
sequences

* Misc bug fixes.

* For the complete list of changes please see:
https://github.com/t-woerner/firewalld/releases/tag/v0.4.4

Fri Sep 2 14:00:00 2016 mchandrasAATTsuse.de
- Relax permissions for default installation files. The files in
/usr/lib/firewalld are the default ones as shipped by the package and
there is nothing secret in them.

Tue Aug 16 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3.3

* Fixes CVE-2016-5410 (bsc#992772)

* Standard error is now used for errors and warnings

* Several fixes for use in change roots

* Systemd service file changes

* Fixed translations in firewall-config

* Command line clients

* Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)

Tue Jul 5 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3.2

* Fix regression with unavailable optional commands

* All missing backend messages should be warnings

* Individual calls for missing restore commands

* Only one authenticate call for add and remove options and also
sequences

* New service RH-Satellite-6

Tue Jun 28 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3.1

* firewall.command: Fix python3 DBusException message not interable error

* src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing

* firewallctl: Do not trace back on list command without further arguments

* firewallctl (man1): Added remaining sections zone, service, ..

* firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting

* firewall.server.config: Allow to set IndividualCalls property in config interface

* Fix missing icmp rules for some zones

* runProg: Fix issue with running programs

* firewall-offline-cmd: Fix issues with missing system-config-firewall

* firewall.core.ipXtables: Split up source and dest addresses for transaction

* firewall.server.config: Log error in case of loading malformed files in watcher

* Install and package the firewallctl man page

* Translation updates

Wed Jun 22 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3

* New firewallctl utility (rh#1147959)

* doc.xml.seealso: Show firewalld.dbus in See Also sections

* firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)

* {zone,service,ipset,icmptype}_writer: Do not fail on failed backup

* firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd

* firewall-cmd: Dropped duplicate setType call in --new-ipset

* radius service: Support also tcp ports (RBZ#1219717)

* xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources

* config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)

* firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg

* firewall.command: Only print summary and description in print_X_info with verbose

* firewall.command: print_msg should be able to print empty lines

* firewall-config: No processing of runtime passthroughs signals in permanent

* Landspace.io fixes and pylint calm downs

* firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes

* firewall-config: Fixed titles of command and context dialogs, also entry lenths

* firewall-config: pylint calm downs

* firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit

* firewall-config: Use self.active_zoens in conf_zone_added_cb

* firewall.command: New parse_port, extended parse methods with more checks

* firewall.command: Fixed parse_port to use the separator in the split call

* firewall.command: New [de]activate_exception_handler, raise error in parse_X

* services ha: Allow corosync-qnetd port

* firewall-applet: Support for kde5-nm-connection-editor

* tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications

* firewall-offline-cmd: Use FirewallCommand for simplification and sequence options

* tests/firewall-cmd_test.sh: New tests for service and icmptype modifications

* firewall-cmd: Fixed set, remove and query destination options for services

* firewall.core.io.service: Source ports have not been checked in _check_config

* firewall.core.fw_zone: Method check_source_port is not used, removed

* firewall.core.base: Added default to ZONE_TARGETS

* firewall.client: Allow to remove ipv:address pair for service destinations

* tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent

* firewall-cmd: Landscape.io fixes, pylint calm downs

* firewall-cmd: Use FirewallCommand for simplification and sequence options

* firewall.command: New FirewallCommand for command line client simplification

* New services: kshell, rsh, ganglia-master, ganglia-client

* firewalld: Cleanup of unused imports, do not translate some deamon messages

* firewalld: With fd close interation in runProg, it is not needed here anymore

* firewall.core.prog: Add fd close iteration to runProg

* firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function

* firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib

* firewall-config: New add/remove ipset entries from file, remove all entries

* firewall-applet: Fix tooltip after applet start with connection to firewalld

* firewall-config: Select new zone, service or icmptype if the view was empty

* firewalld.spec: Added build requires for iptables, ebtables and ipset

* Adding nf_conntrack_sip module to the service SIP

* firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist

* Drop unneeded python shebangs

* Translation updates
- Remove obsolete patches:

* 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch

* 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch

* 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
the installation phase as well as expose build system\'s problems
due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups.

Wed Jun 8 14:00:00 2016 mchandrasAATTsuse.de
- Add upstream patch to prevent unconditional dependencies to the
NetworkManager typelib (gh#t-woerner/firewalld#119)

* 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch

Tue May 31 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.2

* New module to search for and change ifcfg files for interfaces
not under control of NM

* firewall_config: Enhanced messages in status bar

* firewall-config: New message window as overlay if not connected

* firewall-config: Fix sentivity of option, view menus and main
paned if not connected

* firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
some cleanup

* firewall-[offline]cmd: Show target in zone information

* D-Bus: Completed masquerade methods in FirewallClientZoneSettings

* Fixed log-denied rules for icmp-blocks

* Keep sorting of interfaces, services, icmp-blocks and other
settings in zones

* Fixed runtime-to-permanent not to save interfaces under control
of NM

* New icmp-block-inversion flag in the zones

* ICMP type filtering in the zones

* New services: sip, sips, managesieve

* rich rules: Allow destination action (rh#1163428)

* firewall-offline-cmd: New option -q/--quiet

* firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file

* firewall-[offline-]cmd: Fix option for setting the destination
address

* firewall-config: Fixed resizing behaviour

* New transaction model for speed ups in start, restart, stop and
other actions

* firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults

* Fixed memory leak in dbus_introspection_add_properties

* Landscape.io fixes, pylint calm downs

* New D-Bus getXnames methods to speed up firewall-config and firewall-cmd

* ebtables-restore: No support for COMMIT command

* Source port support in services, zones and rich rules

* firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets

* firewall-config: New active bindings side bar for simple binding changes

* Reworked NetworkManager module

* Proper default zone handling for NM connections

* Try to set zone binding with NM if interface is under control of NM

* Code cleanup and bug fixes

* Include test suite in the release and install in /usr/share/firewalld/tests

* New Travis-CI configuration file

* Fixed more broken frensh translations

* Translation updates
- Add upstream patches

* 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
unneeded python shebangs

* 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
not try to access the network-scripts ifcfg directory.
- Drop rejected patch

* drop-standard-output-error-systemd.patch
- Minor spec file clean-up

Fri May 6 14:00:00 2016 jengelhAATTinai.de
- Avoid runtime dependency on systemd, the macros can all deal with
its absence.

Fri Apr 29 14:00:00 2016 mchandrasAATTsuse.de
- Suggest the susefirewall2-to-firewalld package which could assist
in migrating the SuSEFirewall2 iptables rules to FirewallD.

Thu Apr 21 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.1.2

* Install fw_nm module

* firewalld: Do not fail if log file could not be opened

* Make ipsets visible per default in firewall-config

* Fixed translations with python3
[changes in 0.4.1.1]

* Fix for broken frensh translation
[changes in 0.4.1]

* Enhancements of ipset handling

* No cleanup of ipsets using timeouts while reloading

* Only destroy conflicting ipsets

* Only use ipset types supported by the system

* Add and remove several ipset entries in one call using a file

* Reduce time frame where builtin chains are on policy DROP while reloading

* Include descriptions in --info-X calls

* Command line interface support to get and alter descriptions of zones,

* services, ipsets and icmptypes with permanent option

* Properly watch changes in combined zones

* Fix logging in rich rule forward rules

* Transformed direct.passthrough errors into warnings

* Rework of import structures

* Reduced calls to get ids for port and protocol names (rh#1305434)

* Build and installation fixes by Markos Chandras

* Provide D-Bus properties in introspection data

* Fix for flaws found by landscape.io

* Fix for repeated SUGHUP

* New NetworkManager module to get and set zones of connections, used in
firewall-applet and firewall-config

* configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)

* Code cleanups

* Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency

Tue Mar 8 13:00:00 2016 mchandrasAATTsuse.de
- Do not recommend a specific version for the lang subpackage

Tue Mar 1 13:00:00 2016 mchandrasAATTsuse.de
- Move translations to a new subpackage

Mon Feb 29 13:00:00 2016 mchandrasAATTsuse.de
- Set DISABLE_RESTART_ON_UPDATE to \'yes\' instead of \'1\'. The macros in
/etc/rpm/macros.systemd only check for the \'yes\' value so fix it to
properly prevent the firewalld service from being restarted during
updates.

Mon Feb 22 13:00:00 2016 mchandrasAATTsuse.de
- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
and libnotify dependencies (see OBS SR#360792)

Mon Feb 22 13:00:00 2016 jslabyAATTsuse.com
- firewall-config needs typelib(NetworkManager) to run

Mon Feb 1 13:00:00 2016 mchandrasAATTsuse.de
- Initial commit. Version 0.4.0

* drop-standard-output-error-systemd.patch (gh#t-woerner/firewalld/pull/67)