Changelog for firewall-applet-0.4.4.5-84.1.noarch.rpm :
Tue Jun 6 14:00:00 2017 mchandrasAATTsuse.de
- Update to version 0.4.4.5

* firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)

* Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules

* firewall-cmd: Fix --{set,get}-{short,description} for zone

* firewall.core.ipXtables: Use new wait option for restore commands if available

* Adding ovirt-vmconsole service file

* Adding oVirt storage-console service.

* Adding ctdb service file.

* Adding service file for nrpe.

* Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)

* D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)

* firewall.core.fw_config: Fix wrong variable use in repr output

* firewall.core.fw_icmptype: Add missing import for copy

* firewall.core.fw_test: Fix wrong format string in repr

* firewall.core.io.zone: Fix getattr use on super(Zone)

* firewall.functions: New function get_nf_nat_helpers

* firewall.core.fw: Get NAT helpers and store them internally.

* firewall.core.fw_zone: Load NAT helpers with conntrack helpers

* firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers

* firewall.server.firewalld: New property for NAT helpers supported by the kernel

Mon Mar 27 14:00:00 2017 mchandrasAATTsuse.de
- Update to version 0.4.4.4

* Drop references to fedorahosted.org from spec file and Makefile.am

* firewall-config: Show invalid ipset type in the ipset dialog in the bad label

* firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env

* firewall.server.firewalld: Provide information about the supported icmp types

* firewall.core.fw_icmptype: Add ICMP type only if the type is supported

* firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types

* firewall.core.ipXtables: New method supported_icmp_types

* firewall-config: Deactivate edit buttons if there are no items

* firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)

* firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default

* firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:

* 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch

Mon Feb 13 13:00:00 2017 mchandrasAATTsuse.de
- Update to version 0.4.4.3

* New service freeipa-trust (rh#1411650)

* Complete icmp types for IPv4 and IPv6

* New h323 helper container

* Support helper container: h323

* firewall.server.decorators: ALREADY_ errors should be logged as warnings

* firewall.command: ALREADY_SET should also result in zero exit code

* tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd

* Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface

* New checks for ipset entry validation

* Use ipset dimension for match

* firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list

* New firewall.core.icmp providing names and types for icmp and icmpv6 values

* firewall.core.fw_ipset: New methods to get ipset dimension and applied state

* firewall.errors: New error NOT_APPLIED

* firewall-cmd man page: Add missing --get-ipset-types

* firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)

* firewall.core.prog: Fix addition of the error output in runProg

* Speed up ipset handling, (re)loading and import from file

* Support --family option for --new-ipset

* Handle FirewallError for query sequences in command line tools

* Fail to alter entries of ipsets with timeout

* Extended tests for ipset options

* Return empty list for ipsets using timeouts

* firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)

* firewalld.conf man page: New section about AutomaticHelpers

* firewall-offline-cmd man page: Added -v and -q options, fixed section ids

* firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface

* firewall.core.fw_zone: Limit masquerading forward rule to new connections

* firewall-config: Update active zones on reloaded signal

* firewall-applet: Update active zones and tooltip on reloaded signal

* firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)

* Support icmp-type usage in rich rules (rh#1409544)

* firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)

* firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests

* Speed up start and restart for ipsets with lots of entries (rh#1416817)

* Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)

* Code cleanup and minor bug fixes

* firewall.core.prog: Fix addition of the error output in runProg

* New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync

* Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)

* 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch

Mon Dec 5 13:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.4.2

* firewalld.spec: Added helpers and ipsets paths to firewalld-filesystem

* firewall.core.fw_nm: create NMClient lazily

* Do not use hard-coded path for modinfo, use autofoo to detect it

* firewall.core.io.ifcfg: Dropped invalid option warning with bad format string

* firewall.core.io.ifcfg: Properly handle quoted ifcfg values

* firewall.core.fw_zone: Do not reset ZONE with ifdown

* Updated translations from zanata

* firewall-config: Extra grid at bottom to visualize firewalld settings

Mon Nov 14 13:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.4.1

* Translation updates form zanata

* firewallctl: New support for helpers

* firewallctl: Use sys.excepthook to force exception_handler usage always

* firewall-config: Use proper source check in sourceDialog

Mon Oct 31 13:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.4

* firewall-applet: Use PyQt5

* firewall-config: New nf_conntrack_select dialog, use nf_conntrack_helpers
D-Bus property

* New helpers Q.931 and RAS from nf_conntrack_h323

* firewall.core.fw_zone: Add zone bingings for PREROUTING in the raw table

* firewall.core.ipXtables: Add PREROUTING default rules for zones in raw
table

* New helper configuration files for amanda, ftp, irc, netbios-ns, pptp,
sane, sip, snmp and tftp

* firewall-cmd: Fixed --{get,set}-{description,short} for permanent zones

* firewall.command: Do not use error code 254 for {ALREADY,NOT}_ENABLED
sequences

* Misc bug fixes.

* For the complete list of changes please see:
https://github.com/t-woerner/firewalld/releases/tag/v0.4.4

Fri Sep 2 14:00:00 2016 mchandrasAATTsuse.de
- Relax permissions for default installation files. The files in
/usr/lib/firewalld are the default ones as shipped by the package and
there is nothing secret in them.

Tue Aug 16 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3.3

* Fixes CVE-2016-5410 (bsc#992772)

* Standard error is now used for errors and warnings

* Several fixes for use in change roots

* Systemd service file changes

* Fixed translations in firewall-config

* Command line clients

* Fixes infinite event handling loop in firewall-{config,applet} (bsc#992082)

Tue Jul 5 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3.2

* Fix regression with unavailable optional commands

* All missing backend messages should be warnings

* Individual calls for missing restore commands

* Only one authenticate call for add and remove options and also
sequences

* New service RH-Satellite-6

Tue Jun 28 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3.1

* firewall.command: Fix python3 DBusException message not interable error

* src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing

* firewallctl: Do not trace back on list command without further arguments

* firewallctl (man1): Added remaining sections zone, service, ..

* firewallctl: Added runtime-to-permanent, interface and source parser, IndividualCalls setting

* firewall.server.config: Allow to set IndividualCalls property in config interface

* Fix missing icmp rules for some zones

* runProg: Fix issue with running programs

* firewall-offline-cmd: Fix issues with missing system-config-firewall

* firewall.core.ipXtables: Split up source and dest addresses for transaction

* firewall.server.config: Log error in case of loading malformed files in watcher

* Install and package the firewallctl man page

* Translation updates

Wed Jun 22 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.3

* New firewallctl utility (rh#1147959)

* doc.xml.seealso: Show firewalld.dbus in See Also sections

* firewall.core.fw_config: Create backup on zone, service, ipset and icmptype removal (rh#1339251)

* {zone,service,ipset,icmptype}_writer: Do not fail on failed backup

* firewall-[offline-]cmd: Fix --new-X-from-file options for files in cwd

* firewall-cmd: Dropped duplicate setType call in --new-ipset

* radius service: Support also tcp ports (RBZ#1219717)

* xmlschemas: Support source-port, protocol, icmp-block-inversion and ipset sources

* config.xmlschema.service.xsd: Fix service destination conflicts (rh#1296573)

* firewall-cmd, firewalld man: Information about new NetworkManager and ifcfg

* firewall.command: Only print summary and description in print_X_info with verbose

* firewall.command: print_msg should be able to print empty lines

* firewall-config: No processing of runtime passthroughs signals in permanent

* Landspace.io fixes and pylint calm downs

* firewall.core.io.zone: Add zone_reader and zone_writer to all, pylint fixes

* firewall-config: Fixed titles of command and context dialogs, also entry lenths

* firewall-config: pylint calm downs

* firewall.core.fw_zone: Fix use of MAC source in rich rules without ipv limit

* firewall-config: Use self.active_zoens in conf_zone_added_cb

* firewall.command: New parse_port, extended parse methods with more checks

* firewall.command: Fixed parse_port to use the separator in the split call

* firewall.command: New [de]activate_exception_handler, raise error in parse_X

* services ha: Allow corosync-qnetd port

* firewall-applet: Support for kde5-nm-connection-editor

* tests/firewall-offline-cmd_test.sh: New tests for service and icmptype modifications

* firewall-offline-cmd: Use FirewallCommand for simplification and sequence options

* tests/firewall-cmd_test.sh: New tests for service and icmptype modifications

* firewall-cmd: Fixed set, remove and query destination options for services

* firewall.core.io.service: Source ports have not been checked in _check_config

* firewall.core.fw_zone: Method check_source_port is not used, removed

* firewall.core.base: Added default to ZONE_TARGETS

* firewall.client: Allow to remove ipv:address pair for service destinations

* tests/firewall-offline-cmd_test.sh: There is no timeout option in permanent

* firewall-cmd: Landscape.io fixes, pylint calm downs

* firewall-cmd: Use FirewallCommand for simplification and sequence options

* firewall.command: New FirewallCommand for command line client simplification

* New services: kshell, rsh, ganglia-master, ganglia-client

* firewalld: Cleanup of unused imports, do not translate some deamon messages

* firewalld: With fd close interation in runProg, it is not needed here anymore

* firewall.core.prog: Add fd close iteration to runProg

* firewall.core.fw_nm: Hide NM typelib import, new nm_get_dbus_interface function

* firewalld.spec: Require NetworkManager-libnm instead of NetworkManager-glib

* firewall-config: New add/remove ipset entries from file, remove all entries

* firewall-applet: Fix tooltip after applet start with connection to firewalld

* firewall-config: Select new zone, service or icmptype if the view was empty

* firewalld.spec: Added build requires for iptables, ebtables and ipset

* Adding nf_conntrack_sip module to the service SIP

* firewall: core: fw_ifcfg: Quickly return if ifcfg directory does not exist

* Drop unneeded python shebangs

* Translation updates
- Remove obsolete patches:

* 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch

* 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch

* 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch
- Add missing %{?_smp_mflags} during install. This will speed up
the installation phase as well as expose build system\'s problems
due to higher level of parallelism.
- Run make during %build to ensure missing documentation is generated.
- spec file cleanups.

Wed Jun 8 14:00:00 2016 mchandrasAATTsuse.de
- Add upstream patch to prevent unconditional dependencies to the
NetworkManager typelib (gh#t-woerner/firewalld#119)

* 0003-firewall.core.fw_nm-Hide-NM-typelib-import-new-nm_ge.patch

Tue May 31 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.2

* New module to search for and change ifcfg files for interfaces
not under control of NM

* firewall_config: Enhanced messages in status bar

* firewall-config: New message window as overlay if not connected

* firewall-config: Fix sentivity of option, view menus and main
paned if not connected

* firewall-applet: Quit on SIGINT (Ctrl-C), reduced D-Bus calls,
some cleanup

* firewall-[offline]cmd: Show target in zone information

* D-Bus: Completed masquerade methods in FirewallClientZoneSettings

* Fixed log-denied rules for icmp-blocks

* Keep sorting of interfaces, services, icmp-blocks and other
settings in zones

* Fixed runtime-to-permanent not to save interfaces under control
of NM

* New icmp-block-inversion flag in the zones

* ICMP type filtering in the zones

* New services: sip, sips, managesieve

* rich rules: Allow destination action (rh#1163428)

* firewall-offline-cmd: New option -q/--quiet

* firewall-[offline-]cmd: New --add-[zone,service,ipset,icmptype]-from-file

* firewall-[offline-]cmd: Fix option for setting the destination
address

* firewall-config: Fixed resizing behaviour

* New transaction model for speed ups in start, restart, stop and
other actions

* firewall-cmd: New options --load{zone,service,ipset,icmptype}-defaults

* Fixed memory leak in dbus_introspection_add_properties

* Landscape.io fixes, pylint calm downs

* New D-Bus getXnames methods to speed up firewall-config and firewall-cmd

* ebtables-restore: No support for COMMIT command

* Source port support in services, zones and rich rules

* firewall-offline-cmd: Added --{add,remove}-entries-from-file for ipsets

* firewall-config: New active bindings side bar for simple binding changes

* Reworked NetworkManager module

* Proper default zone handling for NM connections

* Try to set zone binding with NM if interface is under control of NM

* Code cleanup and bug fixes

* Include test suite in the release and install in /usr/share/firewalld/tests

* New Travis-CI configuration file

* Fixed more broken frensh translations

* Translation updates
- Add upstream patches

* 0001-src-firewall-core-Drop-unneeded-python-shebangs.patch: Removes
unneeded python shebangs

* 0002-firewall-core-fw_ifcfg-Quickly-return-if-ifcfg-direc.patch: Do
not try to access the network-scripts ifcfg directory.
- Drop rejected patch

* drop-standard-output-error-systemd.patch
- Minor spec file clean-up

Fri May 6 14:00:00 2016 jengelhAATTinai.de
- Avoid runtime dependency on systemd, the macros can all deal with
its absence.

Fri Apr 29 14:00:00 2016 mchandrasAATTsuse.de
- Suggest the susefirewall2-to-firewalld package which could assist
in migrating the SuSEFirewall2 iptables rules to FirewallD.

Thu Apr 21 14:00:00 2016 mchandrasAATTsuse.de
- Update to version 0.4.1.2

* Install fw_nm module

* firewalld: Do not fail if log file could not be opened

* Make ipsets visible per default in firewall-config

* Fixed translations with python3
[changes in 0.4.1.1]

* Fix for broken frensh translation
[changes in 0.4.1]

* Enhancements of ipset handling

* No cleanup of ipsets using timeouts while reloading

* Only destroy conflicting ipsets

* Only use ipset types supported by the system

* Add and remove several ipset entries in one call using a file

* Reduce time frame where builtin chains are on policy DROP while reloading

* Include descriptions in --info-X calls

* Command line interface support to get and alter descriptions of zones,

* services, ipsets and icmptypes with permanent option

* Properly watch changes in combined zones

* Fix logging in rich rule forward rules

* Transformed direct.passthrough errors into warnings

* Rework of import structures

* Reduced calls to get ids for port and protocol names (rh#1305434)

* Build and installation fixes by Markos Chandras

* Provide D-Bus properties in introspection data

* Fix for flaws found by landscape.io

* Fix for repeated SUGHUP

* New NetworkManager module to get and set zones of connections, used in
firewall-applet and firewall-config

* configure: Autodetect backend tools ({ip,ip6,eb}tables{,-restore}, ipset)

* Code cleanups

* Bug fixes
- Fix drop-standard-output-error-systemd.patch tagging
- Add libxslt-tools build dependency

Tue Mar 8 13:00:00 2016 mchandrasAATTsuse.de
- Do not recommend a specific version for the lang subpackage

Tue Mar 1 13:00:00 2016 mchandrasAATTsuse.de
- Move translations to a new subpackage

Mon Feb 29 13:00:00 2016 mchandrasAATTsuse.de
- Set DISABLE_RESTART_ON_UPDATE to \'yes\' instead of \'1\'. The macros in
/etc/rpm/macros.systemd only check for the \'yes\' value so fix it to
properly prevent the firewalld service from being restarted during
updates.

Mon Feb 22 13:00:00 2016 mchandrasAATTsuse.de
- Drop typelib(NetworkManager), NetworkManager-glib, gtk3
and libnotify dependencies (see OBS SR#360792)

Mon Feb 22 13:00:00 2016 jslabyAATTsuse.com
- firewall-config needs typelib(NetworkManager) to run

Mon Feb 1 13:00:00 2016 mchandrasAATTsuse.de
- Initial commit. Version 0.4.0

* drop-standard-output-error-systemd.patch (gh#t-woerner/firewalld/pull/67)