Changeset 6d6c19d for postlfs


Ignore:
Timestamp:
12/04/2019 12:31:54 AM (4 years ago)
Author:
DJ Lucas <dj@…>
Branches:
10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 9.1, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, lazarus, lxqt, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal
Children:
9e5667af
Parents:
a5bc3d2
Message:

Update to blfs-bootscripts-20191203.
Update to firewalld-0.8.0. Fixes #12734.
Update to nftables-0.9.3. Fixes #12850.
Update to libnftnl-1.1.5. Fixes #12851.
Add missing dependency six to python-slip.

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@22424 af4574ff-66df-0310-9fd7-8a98e5e911e0

Location:
postlfs/security
Files:
3 edited

Legend:

Unmodified
Added
Removed

  • postlfs/security/firewalld.xml

    ra5bc3d2 r6d6c19d  
    77  <!ENTITY firewalld-download-http "https://github.com/firewalld/firewalld/releases/download/v&firewalld-version;/firewalld-&firewalld-version;.tar.gz">
    88  <!ENTITY firewalld-download-ftp  " ">
    9   <!ENTITY firewalld-md5sum        "2549c2006def07a19b4c77ec960e5aab">
     9  <!ENTITY firewalld-md5sum        "f3cabced64e543cb1e99f0dfa4b963e0">
    1010  <!ENTITY firewalld-size          "1.6 MB">
    11   <!ENTITY firewalld-buildsize     "26 MB">
    12   <!ENTITY firewalld-time          "0.2 SBU">
     11  <!ENTITY firewalld-buildsize     "25 MB (additionall 2 MB for tests)">
     12  <!ENTITY firewalld-time          "0.2 SBU (additional 6.2 SBU for tests)">
    1313]>
    1414
    … …  
    7676    </itemizedlist>
    7777
    78     <bridgehead renderas="sect3">Additional Downloads</bridgehead>
    79     <itemizedlist spacing="compact">
    80       <listitem>
    81         <para>
    82           Required patch:
    83           <ulink url="&patch-root;/firewalld-&firewalld-version;-builtin-1.patch"/>
    84        </para>
    85       </listitem>
    86     </itemizedlist>
    87 
    8878    <bridgehead renderas="sect3">firewalld Dependencies</bridgehead>
    8979
    9080    <bridgehead renderas="sect4">Required</bridgehead>
    9181    <para role="required">
    92       <xref linkend="nftables"/> or <xref linkend="iptables" role="nodump"/>,
     82      <xref linkend="nftables"/>,
    9383      and <xref linkend="python-slip"/>
    9484    </para>
    … …  
    9686    <bridgehead renderas="sect4">Recommended</bridgehead>
    9787    <para role="recommended">
    98       <xref linkend="DocBook"/> and <xref linkend="libxslt"/> (for building
    99       the manual pages), and
     88      <xref linkend="DocBook"/>,
     89      <xref linkend="iptables"/>, and
     90      <xref linkend="libxslt"/> (for building the manual pages)
     91    </para>
     92
     93    <bridgehead renderas="sect4">Optional</bridgehead>
     94    <para role="optional">
     95      <xref linkend="gtk3" role="runtime"/> (runtime only, required for
     96      <application>fireall-config</application>),
     97      <xref linkend="qt5" role="runtime"/> (runtime only, required for
     98      <application>fireall-applet</application>), and
    10099      <ulink url="https://netfilter.org/projects/ipset/index.html">ipset</ulink>
    101100      for ipset support (only when used with iptables)
    102101    </para>
    103102
    104     <bridgehead renderas="sect4">Optional</bridgehead>
    105     <para role="optional">
    106       <xref linkend="qt5" role="runtime"/> (runtime only, required for
    107       <application>fireall-applet</application>) and
    108       <xref linkend="gtk3" role="runtime"/> (runtime only, required for
    109       <application>fireall-config</application>)
    110     </para>
    111 
    112103    <para condition="html" role="usernotes">User Notes:
    113104      <ulink url="&blfs-wiki;/firewalld"/>
    … …  
    117108  <sect2 role="installation">
    118109    <title>Installation of firewalld</title>
    119 
    120     <para>
    121       Fix an issue with use of built-in kernel modules:
    122     </para>
    123 
    124 <screen><userinput>patch -Np1 -i ../firewalld-&firewalld-version;-builtin-1.patch</userinput></screen>
    125110
    126111    <para>
    … …  
    141126
    142127    <para>
    143       To run the testsuite, isssue the command <command>make test</command>.
    144     </para>
    145 
     128      The testsuite for <application>firewalld</application> is very dependent
     129      on the running kernel and system configuration. It requires
     130      <application>ipset</application> as well as both backends, and all
     131      supported kernel options available.
     132    </para>
     133
     134    <para>
     135      If the above conditions are met, run the testsuite as the
     136      <systemitem class="username">root</systemitem> user with the command
     137      <command>make -C src check</command>. Any test failures are likely the
     138      result of an incomplete configuration. Failed tests will give a detailed
     139      failure status at
     140      <filename>src/test/testsuite.dir/&lt;###&gt;/testsuite.log</filename>.
     141    </para>
    146142
    147143    <para revision="sysv">
    … …  
    171167      <parameter>--without-systemd</parameter>: This command prevents
    172168      installation of <application>systemd</application> services.
     169    </para>
     170
     171    <para>
     172      <option>--without-{ip{,6},eb}tables{,-restore}</option>: These switches
     173      disable <application>iptables</application> support and are required if
     174      you wish to build without iptables support.
    173175    </para>
    174176

  • postlfs/security/iptables.xml

    ra5bc3d2 r6d6c19d  
    7575    <bridgehead renderas="sect4">Optional</bridgehead>
    7676    <para role="optional">
    77       <xref linkend="nftables"/>
     77      <xref linkend="nftables"/>,
     78      <xref linkend="libpcap"/> (required for nfsypproxy support),
     79      <ulink url="https://github.com/tadamdam/bpf-utils">bpf-utils</ulink>
     80      (required for Berkely Packet Filter support),
     81      <ulink url="https://netfilter.org/projects/libnfnetlink/">libnfnetlink</ulink>
     82      (required for connlable support), and
     83      <ulink url="https://netfilter.org/projects/libnetfilter_conntrack/">libnetfilter_conntrack"</ulink>
     84      (required for connlabel support)
    7885    </para>
    7986

  • postlfs/security/nftables.xml

    ra5bc3d2 r6d6c19d  
    77  <!ENTITY nftables-download-http "https://netfilter.org/projects/nftables/files/nftables-&nftables-version;.tar.bz2">
    88  <!ENTITY nftables-download-ftp  " ">
    9   <!ENTITY nftables-md5sum        "dfe130724d7c998eb26b56447e932899">
    10   <!ENTITY nftables-size          "764 KB">
    11   <!ENTITY nftables-buildsize     "31 MB">
     9  <!ENTITY nftables-md5sum        "9913b2b46864394d41916b74638e0875">
     10  <!ENTITY nftables-size          "772 KB">
     11  <!ENTITY nftables-buildsize     "34 MB">
    1212  <!ENTITY nftables-time          "0.2 SBU">
    1313]>
    … …  
    8080    </para>
    8181
     82    <bridgehead renderas="sect4">Recommended</bridgehead>
     83    <para role="recommended">
     84        <xref linkend="jansson"/> (for JSON rules table support)
     85    </para>
     86
    8287    <bridgehead renderas="sect4">Optional</bridgehead>
    8388    <para role="optional">
    84       <xref linkend="iptables"/>,
    85       <xref linkend="jansson"/>, and
     89      <xref linkend="iptables"/> and
    8690      <xref linkend="docbook-utils"/>
    8791    </para>
    … …  
    141145            --sbindir=/sbin   \
    142146            --sysconfdir=/etc \
     147            --with-json       \
    143148            --with-python-bin=/usr/bin/python3 &amp;&amp;
    144149make</userinput></screen>
    … …  
    165170
    166171    <para>
     172      <parameter>--with-json</parameter>: build with support for JSON rules.
     173      Omit if <xref linkend="jansson"/> is not available.
     174    </para>
     175
     176    <para>
    167177      <parameter>--with-python-bin=/usr/bin/python3</parameter>: force use of
    168178      <application>Python3</application>.
    … …  
    176186
    177187    <para>
    178       <parameter>--with-json</parameter>: build with support for JSON output if
    179       <xref linkend="jansson"/> is available.
    180     </para>
    181 
    182     <para>
    183       <parameter>--with-xtables</parameter>: build with
     188      <option>--with-xtables</option>: build with
    184189      <xref linkend="iptables"/> libxtables support.
    185190    </para>
Note: See TracChangeset for help on using the changeset viewer.