File SuSEfirewall2.spec of Package SuSEfirewall2.6018

#
# spec file for package SuSEfirewall2
#
# Copyright (c) 2017 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.

# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
# icecream 0


%define newname SUSEfirewall2
Name:           SuSEfirewall2
Version:        3.6.312
Release:        0
Url:            http://en.opensuse.org/SuSEfirewall2
PreReq:         %fillup_prereq %insserv_prereq /bin/sed textutils fileutils grep filesystem
Requires:       coreutils
Requires:       iptables
Requires:       perl
Requires:       perl-Net-DNS
Requires:       sysconfig
Summary:        Stateful Packet Filter Using iptables and netfilter
License:        GPL-2.0
Group:          Productivity/Networking/Security
Source:         SuSEfirewall2-%{version}.tar.bz2
BuildArch:      noarch
BuildRoot:      %{_tmppath}/%{name}-%{version}-build
# for the service_* macros
%{?systemd_requires}
BuildRequires:  pkgconfig(systemd)
Patch0:         0000-remove-before-dependency-on-non-existing-service-bnc-961258.patch
Patch1:         0001-ignore-bootlock-for-virtual-and-hotplugged-devices-bnc-785299.patch
Patch2:         0002-main-script-support-IPv6-in-FW_TRUSTED_NETS-bnc-841046.patch
Patch3:         0003-logging-don-t-flood-log-with-dropped-IPv6-multicast-bnc-847193.patch
Patch4:         0004-Allow-admin-override-of-proc-settings-bnc-906136.patch
Patch5:         0005-systemd-fix-a-race-condition-in-the-_init-service-bnc-1014987.patch
Patch6:         0006-backport-of-sysctl.d-feature-from-master-bnc-1044523.patch
Patch7:         0007-fix-nfs-dependencies.patch
Patch8:         0008-rpcinfo-improve-implicit-portmapper-rules-logic.patch
Patch9:         0009-rpcinfo-fix-regression.patch

%description
SuSEfirewall2 implements a packet filter that protects hosts and
routers by limiting which services or networks are accessible on the
host or via the router.

SuSEfirewall2 uses the iptables/netfilter packet filtering
infrastructure to create a flexible rule set for a stateful firewall.

%prep
%setup
%patch0 -p1
%patch1 -p1
%patch2 -p1
%patch3 -p1
%patch4 -p1
%patch5 -p1
%patch6 -p1
%patch7 -p1
%patch8 -p1
%patch9 -p1
# please send patches to lnussel for inclusion in git first
# http://gitorious.org/opensuse/susefirewall2

%build

%install
make DESTDIR="%{buildroot}" install install_doc
install -d -m 755 %{buildroot}/var/adm/fillup-templates/
install -m 644 SuSEfirewall2.sysconfig %{buildroot}/var/adm/fillup-templates/sysconfig.SuSEfirewall2
install -D -m 644 SuSEfirewall2.sysconfig %{buildroot}/etc/sysconfig/SuSEfirewall2
install -d -m 755 %{buildroot}%{_datadir}/susehelp/meta/Manuals/Productivity
install -m 644 doc/SuSEfirewall2-doc.desktop \
	%{buildroot}%{_datadir}/susehelp/meta/Manuals/Productivity/SuSEfirewall2.desktop
#
# compat symlink
mkdir -p %{buildroot}/sbin
ln -s /usr/sbin/SuSEfirewall2 %{buildroot}/sbin/SuSEfirewall2
ln -s /usr/sbin/rcSuSEfirewall2 %{buildroot}/sbin/rcSuSEfirewall2
# symlinks using the new SUSE spelling
ln -s %{name} %{buildroot}/sbin/%{newname}
ln -s %{name} %{buildroot}/usr/sbin/%{newname}

%files
%defattr(-, root, root)
%doc %{_docdir}/%{name}
%doc %{_datadir}/susehelp
%config(noreplace) /etc/sysconfig/scripts/SuSEfirewall2-custom
%config(noreplace) /etc/sysconfig/SuSEfirewall2
/etc/sysconfig/SuSEfirewall2.d/services/*
/etc/sysconfig/scripts/SuSEfirewall2-rpcinfo
/etc/sysconfig/scripts/SuSEfirewall2-showlog
/etc/sysconfig/scripts/SuSEfirewall2-open
/etc/sysconfig/scripts/SuSEfirewall2-batch
/etc/sysconfig/scripts/SuSEfirewall2-qdisc
/etc/sysconfig/scripts/SuSEfirewall2-oldbroadcast
/etc/sysconfig/network/scripts/SuSEfirewall2
/etc/sysconfig/network/scripts/firewall
/etc/sysconfig/network/if-up.d/SuSEfirewall2
/sbin/SuSEfirewall2
/sbin/rcSuSEfirewall2
/usr/sbin/rcSuSEfirewall2
/usr/sbin/SuSEfirewall2
/usr/sbin/%{newname}
/sbin/%{newname}
%dir /usr/share/SuSEfirewall2
%dir /usr/share/SuSEfirewall2/defaults
/usr/lib/systemd/system/SuSEfirewall2.service
/usr/lib/systemd/system/SuSEfirewall2_init.service
/usr/share/SuSEfirewall2/defaults/50-default.cfg
/usr/share/SuSEfirewall2/rpcusers
/var/adm/fillup-templates/sysconfig.SuSEfirewall2

%pre
%service_add_pre SuSEfirewall2.service
# Upgrade case means more than 1 package in system, so probably 2
# if we still have the LSB init script, save its state, remove _setup
# and store it in the database.
if [ $FIRST_ARG -gt 1 ]; then                                                           
	if test -e /etc/init.d/SuSEfirewall2_setup ; then
		if test ! -e /var/lib/systemd/migrated/SuSEfirewall2 ; then
			/usr/sbin/systemd-sysv-convert --save SuSEfirewall2_setup
			sed -i -e 's/SuSEfirewall2_setup/SuSEfirewall2/' /var/lib/systemd/sysv-convert/database
		fi
	fi
fi

%post
%service_add_post SuSEfirewall2.service

%preun
%service_del_preun SuSEfirewall2.service

%postun
%service_del_postun SuSEfirewall2.service

%changelog