linux/poky.git/meta/recipes-extended/iptables, branch 4.1_M2

iptables: upgrade 1.8.7 -> 1.8.8

2022-05-20T21:52:22+00:00

(From OE-Core rev: b44d6bc7e56121d977a7bc491aec00cf3fb510fb) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

iptables: use nft backend with libnftnl PACKAGECONFIG

2022-03-18T23:32:46+00:00

Currently, when the libnftnl (part of meta-networking) PACKAGECONFIG is enabled for iptables, both legacy and nft-based binaries are built and installed in the image. However, the "iptables" symlink in this case still points to xtables-legacy-multi, rather than xtables-nft-multi. This patch adds a conditional check to replace the symlink to point to the latter if iptables is built with libnftnl support, which is consistent with other major distros (e.g. Fedora). The "iptables-legacy" symlink remains present and unmodified. (From OE-Core rev: bc41682ab2a259b7bc6a56fa3ba42907f4c8bf25) Signed-off-by: tgamblin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

iptables: do not install /etc/ethertypes

2022-03-11T06:56:01+00:00

Take inspiration from the ebtables recipe in meta-networking and omit installation of etc/ethertypes, since it is provided by netbase. If we don't do this, the following error occurs during build: Error: Transaction test error: file /etc/ethertypes conflicts between attempted installs of iptables-1.8.7-r0.core2_64 and netbase-1:6.3-r0.noarch (From OE-Core rev: 297fde1a6fc9ddf12bb4b0cba1d5b03664a3f378) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

meta/meta-selftest/meta-skeleton: Update LICENSE variable to use SPDX license identifiers

2022-02-20T16:45:25+00:00

An automated conversion using scripts/contrib/convert-spdx-licenses.py to convert to use the standard SPDX license identifiers. Two recipes in meta-selftest were not converted as they're that way specifically for testing. A change in linux-firmware was also skipped and may need a more manual tweak. (From OE-Core rev: ceda3238cdbf1beb216ae9ddb242470d5dfc25e0) Signed-off-by: Richard Purdie

Convert to new override syntax

2021-08-02T14:44:10+00:00

This is the result of automated script conversion: scripts/contrib/convert-overrides.py converting the metadata to use ":" as the override character instead of "_". (From OE-Core rev: 42344347be29f0997cc2f7636d9603b1fe1875ae) Signed-off-by: Richard Purdie

iptables: upgrade 1.8.6 -> 1.8.7

2021-01-23T17:08:54+00:00

(From OE-Core rev: 7d5c46abf904de5c9770e466baef38705f46695e) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

iptables: upgrade 1.8.5 -> 1.8.6

2020-11-03T08:21:12+00:00

(From OE-Core rev: d81f9f3ed497241d6ac93d3c756eb55747eb07a0) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie

iptables: split iptables-apply to its own package

2020-06-17T10:10:28+00:00

We do not want iptables to depend on bash. So move iptables-apply/ip6tables-apply to a separate package. (From OE-Core rev: 9a2386443af23d4b713b9635a0275165565ef8f4) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

iptables: fix invalid symbolic link for ip6tables-apply

2020-06-17T10:10:28+00:00

The iptables-apply is not installed which makes ip6tables-apply as an invalid symbolic link: $ ls -l /usr/sbin/ip6tables-apply lrwxrwxrwx 1 root root 14 Jun 11 08:27 /usr/sbin/ip6tables-apply -> iptables-apply $ ls -l /usr/sbin/iptables-apply ls: cannot access '/usr/sbin/iptables-apply': No such file or directory Backport a patch to fix the issue. (From OE-Core rev: c3070d3b2e31a31fc32294972e7a3fae46b6e70f) Signed-off-by: Yi Zhao Signed-off-by: Richard Purdie

iptables: upgrade 1.8.4 -> 1.8.5

2020-06-09T12:14:01+00:00

This release contains the following fixes and enhancements: xtables-save/xtables-restore: - Fix parser in `--noflush' mode incorrectly rejecting chain definitions and empty lines. - Fix crash when restoring or dumping while other ruleset changes happen in parallel. iptables-apply: - Install the script along with `make install'. - Introduce parameters `-c' (run command) and `-w' (save successfully applied rules to file). - Use `mktemp' instead of `tempfile' for temporary files. iptables-translate: - Support `time' match and `NOTRACK' target. - Fix for special interface names `*', `+' and `eth++'. ebtables-nft: - Full among match support, including sets with mixed MAC and MAC+IP entries. extensions: - connlabel: Numeric labels were rejected if a connlabel.conf existed in the system. - IDLETIMER: Introduce `--alarm' option. libxtables: - Introduce xtables_fini() to properly deinit the library and close any loaded shared objects. nfnl_osf: - Fix lockup after loading the first line from fingerprints file. - Improve error handling, don't silently exit when deleting a non-existing fingerprint. General: - Fixes for undefined behaviour. - Replace a few unsafe calls to strcpy(). - Fix some warnings when compiling with clang. - Various fixes for valgrind-detected problems such as memory leaks and reachable memory at program exit. (From OE-Core rev: 0d28b963d91503c557adf87e096eb7a98dff6c76) Signed-off-by: Pierre-Jean Texier Signed-off-by: Richard Purdie