summaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-filter
Commit message (Collapse)AuthorAgeFilesLines
...
* Convert to new override syntaxMartin Jansa2021-08-035-15/+15
| | | | | | | | | | This is the result of automated script (0.9.1) conversion: oe-core/scripts/contrib/convert-overrides.py . converting the metadata to use ":" as the override character instead of "_". Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
* nftables: upgrade 0.9.8 -> 0.9.9Trevor Gamblin2021-06-031-1/+1
| | | | | Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.9 -> 1.2.0Trevor Gamblin2021-06-032-127/+131
| | | | | | | | Upgrade libnftnl in preparation for the upgrade of nftables, since the latter requires libnftnl >= 1.2.0. Signed-off-by: Trevor Gamblin <trevor.gamblin@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: update to 7.11Oleksandr Kravchuk2021-03-061-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: update to 7.10Oleksandr Kravchuk2021-02-061-1/+1
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* correct "RRCOMMENDS" typo in ipset recipeRobert P. J. Day2021-02-041-2/+2
| | | | | Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.7 -> 0.9.8Adrian Freihofer2021-01-251-3/+3
| | | | | | | | | | | | | Added missing RDEPENDS to the libnft library from nftables-python to libnftable.so.1 which is loaded dynamically by LibraryLoader into python. Added json to default PACKAGECONFIG which is probably used as well when compiled with python support. For example firewalld crashes at runtime if nftables is compiled without json support. Signed-off-by: Adrian Freihofer <adrian.freihofer@siemens.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.8 -> 1.1.9zangrc2021-01-251-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ipset: add recipeArmin Kuster2021-01-181-0/+21
| | | | | | | This is needed for login-shield pkg in meta-security Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: Add symbol link /sbin/ebtablesHe Zhe2021-01-051-0/+3
| | | | | | | | | | | | | | | | | | The original /sbin/ebtables has been moved to /usr/sbin/ebtables-legacy. But the old path is still used by some other software libvirt. libvirtd[809]: direct firewall backend requested, but /sbin/ebtables is not available: No such file or directory As stated in the related change in ebtable git repo: The new -legacy binary has no problem if called via a symlink with the 'ebtables' name, so users can still name this binary with whatever name. So we add a symbol link from /usr/sbin/ebtables-legacy to /sbin/ebtables. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: do not install /etc/ethertypesYi Zhao2021-01-052-3/+35
| | | | | | | | Refer to Debian, patch the Makefile to prevent /etc/ethertypes installation instead of removing it in do_install_append. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: remove upstream ebtables-legacy-saveYi Zhao2021-01-052-4/+4
| | | | | | | | Remove the upstream ebtables-legacy-save before we install the local ones. And install it to ${sbindir} rather than ${base_sbindir}. Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: add missing file ebtables.commonYi Zhao2021-01-042-3/+170
| | | | | | | | | | | The ebtables.common is required by ebtables.service. Add it back. Fixes: systemd[660]: ebtables.service: Failed to locate executable /usr/sbin/ebtables.common: No such file or directory systemd[660]: ebtables.service: Failed at step EXEC spawning /usr/sbin/ebtables.common: No such file or directory Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: upgrade 2.0.10-4 -> 2.0.11zangrc2020-12-2421-1103/+132
| | | | | | | | | | | | Refresh the following patch: 0010-Adjust-header-include-sequence.patch Referring to Fedora style, ebtables-legacy-save and ebtables.service are retained. The upstream address has been modified. Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: do not install /etc/ethertypesYi Zhao2020-12-162-1/+37
| | | | | | | | | | | | The /etc/ethertypes is provided by netbase since 6.0[1]. Do not instal the file in ebtables, otherwise there would be a conflict: Error: Transaction test error: file /etc/ethertypes conflicts between attempted installs of netbase-1:6.2-r0.corei7_64 and ebtables-2.0.10+4-r4.corei7_64 [1] https://salsa.debian.org/md/netbase/-/commit/316680c6a2c3641b6abc76b3eebf88781f609d35 Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.6 -> 0.9.7Zang Ruochen2020-11-021-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.7 -> 1.1.8Zang Ruochen2020-11-021-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: upgrade 2.1.0 -> 2.1.1Zang Ruochen2020-09-251-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.5 -> 0.9.6Zang Ruochen2020-06-301-1/+1
| | | | | Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.4 -> 0.9.5Pierre-Jean Texier2020-06-081-2/+1
| | | | | Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.6 -> 1.1.7Pierre-Jean Texier2020-06-081-1/+1
| | | | | | | See https://lwn.net/Articles/822353/ Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: upgrade 1.4.5 -> 1.4.6Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-conntrack: upgrade 1.0.7 -> 1.0.8Wang Mingyu2020-04-081-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.3 -> 0.9.4Pierre-Jean Texier2020-04-032-51/+3
| | | | | | | | | See https://lwn.net/Articles/816528/ Also remove patch applied upstream Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.5 -> 1.1.6Pierre-Jean Texier2020-04-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This includes the following changes: ac0778e build: libnftnl 1.1.6 release 60e6d9b include: update nf_tables.h. c8cc25b Revert "bitwise: add support for passing mask and xor via registers." 4bf470b expr: nat: snprint flags in hexadecimal ff92868 expr: masq: revisit _snprintf() c76d36a set: support for NFTNL_SET_EXPR 9270557 set_elem: missing set and build for NFTNL_SET_ELEM_EXPR 4c8abad chain: add NFTNL_CHAIN_FLAGS 75b8778 bitwise: add support for passing mask and xor via registers. 8db0a94 include: update nf_tables.h. 7b4848c tests: bitwise: fix error message. ec3622b src: add nftnl_*_{get,set}_array() 629ee38 src: Fix for reading garbage in nftnl_chain getters 04cc28d set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END 7cd41b5 set: Add support for NFTA_SET_DESC_CONCAT attributes 131a6c2 include: resync nf_tables.h cache copy 8fa63d7 bitwise: add support for left- and right-shifts. 3f232d7 bitwise: add support for new netlink attributes. 3fb5640 include: update nf_tables.h. 154104a bitwise: add helper to print boolean expressions. 66d6afb bitwise: fix some incorrect indentation. 35bac9a Update gitignore. 325cb6f include: Remove buffer.h 6079297 expr: meta: add slave device matching 7e15d9d udata: support for TLV attribute nesting 7f72b5c udata: add NFTNL_UDATA_SET_*TYPEOF* definitions d16abf7 include: typo in object.h C++ wrapper dfe3828 examples: Replace use of deprecated symbols d95a703 chain: Correctly check realloc() call 835d645 flowtable: Correctly check realloc() call 32a8c5f chain: Fix memleak in error path of nftnl_chain_parse_devs() ba1b025 flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() b238876 tests: flowtable: Don't check NFTNL_FLOWTABLE_SIZE Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: upgrade 2.0.3 -> 2.1.0Wang Mingyu2020-01-061-1/+1
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Package python scripts into nonarch libdirKhem Raj2019-12-201-1/+1
| | | | | | Helps fixing packaging errors on mulilib builds Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Expand PACKAGECONFIG, cleanup buildAlex Kiernan2019-12-171-8/+12
| | | | | | | | | | | | | | | | | Fill out PACKAGECONFIG options for json, mini-gmp, readline and xtables whilst matching existing behaviour. Drop PACKAGECONFIG to weak default. Fix upstream version matching so the very old 0.099 is rejected as the newest version. Drop seemingly redundant ASNEEDED which was added in 5477d5bcb727 ("nftables: Upgrade to 0.7") without explanation. Package python files from libdir not libdir_native; whilst they're the same thing, building a target package with native variables is odd. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: upgrade 0.9.2 -> 0.9.3Todd Cunningham2019-12-162-3/+51
| | | | | | | | New patch: 0001-update-python3-nftables-reference.patch Signed-off-by: Todd Cunningham <tcunningham07@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.4 -> 1.1.5Todd Cunningham2019-12-133-300/+18
| | | | | | | | | | | | Remove obselete patch: 0001-Move-exports-before-symbol-definition.patch Refresh patch: 0002-avoid-naming-local-function-as-one-of-printf-family.patch Add one new file in this patch: src/obj/synproxy.c Signed-off-by: Todd Cunningham <tcunningham07@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Fix documentation generationAlex Kiernan2019-12-031-1/+1
| | | | | | | | | | Switch PACKAGECONFIG from man to manpages so we are included when api-documentation is set. Ensure correct tools are available to build the documentation and avoid unsupported option failures by not passing `--enable-man-doc`. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: update to 0.9.2Oleksandr Kravchuk2019-08-271-2/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: upgrade 1.1.3 -> 1.1.4Yuan Chao2019-08-202-15/+41
| | | | | | | | | | | Refresh patch: 0002-avoid-naming-local-function-as-one-of-printf-family.patch Add two new file in this patch: src/expr/synproxy.c src/obj/ct_expect.c Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: 0.9.0 > 0.9.1Mariano Lopez2019-07-231-5/+11
| | | | | | | | The upgrade includes a new python library, therefore added the {PN}-python package. Signed-off-by: Mariano López <just.another.mariano@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: Switch to git fetcherKhem Raj2019-07-211-4/+3
| | | | | | | | github archives are not reliable Fixes arno-iptables-firewall-2.0.3: https://github.com/arno-iptables-firewall/aif/archive/2.0.3.tar.gz: SRC_URI uses unstable GitHub archives [src-uri-bad] Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: update to 1.1.3Oleksandr Kravchuk2019-07-133-161/+209
| | | | | | | Updated libnftnl to 1.1.3 and refreshed patches. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* conntrack-tools: update to 1.4.5Oleksandr Kravchuk2019-05-101-2/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-conntrack: update to 1.0.7Oleksandr Kravchuk2019-05-101-4/+3
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: fix update to 1.0.3Oleksandr Kravchuk2019-05-083-74/+44
| | | | | | | | | SRC_URI was mistakenly not updated in @57967659f4724a8b614f. Removed patch was upstreamed. Another one was refreshed with devtool. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* ebtables: add UPSTREAM_CHECK_URIOleksandr Kravchuk2019-05-061-0/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* arno-iptables-firewall: update to 2.0.3Oleksandr Kravchuk2019-05-051-5/+4
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnetfilter-queue: update to 1.0.3Oleksandr Kravchuk2019-04-291-0/+0
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: add UPSTREAM_CHECK_URIOleksandr Kravchuk2019-04-291-0/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nfacct: add UPSTREAM_CHECK_URIOleksandr Kravchuk2019-04-291-0/+2
| | | | | Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: Upgrade to 0.9.0Alex Kiernan2018-11-1210-918/+20
| | | | | | | Drop all the backports as they're upstream Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* libnftnl: Upgrade to 1.1.1Alex Kiernan2018-11-124-3068/+441
| | | | | Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* nftables: add dependency on bison-nativeMartin Jansa2018-08-191-1/+1
| | | | | | | | | | | | * fixes: checking whether yytext is a pointer... no checking for bison... no checking for byacc... no *** Error: No suitable bison/yacc found. *** Please install the 'bison' package. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
* ebtables: add RECIPE_UPSTREAM_VERSIONYi Zhao2018-05-291-0/+9
| | | | | Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
* recipes: Link with libtirpcKhem Raj2018-05-171-4/+2
| | | | | | | glibc no longer provides rpc implementation Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
* libnetfilter-cthelper: refresh patchesArmin Kuster2018-04-131-29/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | WARNING: libnetfilter-cthelper-1.0.0-r0 do_patch: Some of the context lines in patches were ignored. This can lead to incorrectly applied patches. The context lines in the patches can be updated with devtool: devtool modify <recipe> devtool finish --force-patch-refresh <recipe> <layer_path> Then the updated patches and the source tree (in devtool's workspace) should be reviewed to make sure the patches apply in the correct place and don't introduce duplicate lines (which can, and does happen when some of the context is ignored). Further information: http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450 Details: Applying patch libnetfilter-cthelper-visibility-hidden.patch patching file doxygen.cfg.in patching file src/internal.h patching file src/libnetfilter_cthelper.c Hunk #2 succeeded at 118 with fuzz 2. Now at patch libnetfilter-cthelper-visibility-hidden.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>