Hello community, here is the log from the commit of package firewalld for openSUSE:Factory checked in at 2016-07-09 09:24:06 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/firewalld (Old) and /work/SRC/openSUSE:Factory/.firewalld.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "firewalld" Changes: -------- --- /work/SRC/openSUSE:Factory/firewalld/firewalld.changes 2016-07-01 10:00:44.000000000 +0200 +++ /work/SRC/openSUSE:Factory/.firewalld.new/firewalld.changes 2016-07-09 09:24:09.000000000 +0200 @@ -1,0 +2,11 @@ +Tue Jul 5 14:02:18 UTC 2016 - [email protected] + +- Update to version 0.4.3.2 + * Fix regression with unavailable optional commands + * All missing backend messages should be warnings + * Individual calls for missing restore commands + * Only one authenticate call for add and remove options and also + sequences + * New service RH-Satellite-6 + +------------------------------------------------------------------- Old: ---- firewalld-0.4.3.1.tar.bz2 New: ---- firewalld-0.4.3.2.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ firewalld.spec ++++++ --- /var/tmp/diff_new_pack.vWRyzZ/_old 2016-07-09 09:24:11.000000000 +0200 +++ /var/tmp/diff_new_pack.vWRyzZ/_new 2016-07-09 09:24:11.000000000 +0200 @@ -17,7 +17,7 @@ Name: firewalld -Version: 0.4.3.1 +Version: 0.4.3.2 Release: 0 Summary: A firewall daemon with D-Bus interface providing a dynamic firewall License: GPL-2.0+ ++++++ firewalld-0.4.3.1.tar.bz2 -> firewalld-0.4.3.2.tar.bz2 ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/aclocal.m4 new/firewalld-0.4.3.2/aclocal.m4 --- old/firewalld-0.4.3.1/aclocal.m4 2016-06-28 14:18:35.000000000 +0200 +++ new/firewalld-0.4.3.2/aclocal.m4 2016-07-04 17:10:15.000000000 +0200 @@ -295,8 +295,8 @@ # nls.m4 serial 5 (gettext-0.18) -dnl Copyright (C) 1995-2003, 2005-2006, 2008-2014 Free Software Foundation, -dnl Inc. +dnl Copyright (C) 1995-2003, 2005-2006, 2008-2014, 2016 Free Software +dnl Foundation, Inc. dnl This file is free software; the Free Software Foundation dnl gives unlimited permission to copy and/or distribute it, dnl with or without modifications, as long as this notice is preserved. @@ -327,32 +327,63 @@ AC_SUBST([USE_NLS]) ]) -# pkg.m4 - Macros to locate and utilise pkg-config. -*- Autoconf -*- -# serial 1 (pkg-config-0.24) -# -# Copyright © 2004 Scott James Remnant <[email protected]>. -# -# This program is free software; you can redistribute it and/or modify -# it under the terms of the GNU General Public License as published by -# the Free Software Foundation; either version 2 of the License, or -# (at your option) any later version. -# -# This program is distributed in the hope that it will be useful, but -# WITHOUT ANY WARRANTY; without even the implied warranty of -# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU -# General Public License for more details. -# -# You should have received a copy of the GNU General Public License -# along with this program; if not, write to the Free Software -# Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. -# -# As a special exception to the GNU General Public License, if you -# distribute this file as part of a program that contains a -# configuration script generated by Autoconf, you may include it under -# the same distribution terms that you use for the rest of that program. - -# PKG_PROG_PKG_CONFIG([MIN-VERSION]) -# ---------------------------------- +dnl pkg.m4 - Macros to locate and utilise pkg-config. -*- Autoconf -*- +dnl serial 11 (pkg-config-0.29) +dnl +dnl Copyright © 2004 Scott James Remnant <[email protected]>. +dnl Copyright © 2012-2015 Dan Nicholson <[email protected]> +dnl +dnl This program is free software; you can redistribute it and/or modify +dnl it under the terms of the GNU General Public License as published by +dnl the Free Software Foundation; either version 2 of the License, or +dnl (at your option) any later version. +dnl +dnl This program is distributed in the hope that it will be useful, but +dnl WITHOUT ANY WARRANTY; without even the implied warranty of +dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU +dnl General Public License for more details. +dnl +dnl You should have received a copy of the GNU General Public License +dnl along with this program; if not, write to the Free Software +dnl Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA +dnl 02111-1307, USA. +dnl +dnl As a special exception to the GNU General Public License, if you +dnl distribute this file as part of a program that contains a +dnl configuration script generated by Autoconf, you may include it under +dnl the same distribution terms that you use for the rest of that +dnl program. + +dnl PKG_PREREQ(MIN-VERSION) +dnl ----------------------- +dnl Since: 0.29 +dnl +dnl Verify that the version of the pkg-config macros are at least +dnl MIN-VERSION. Unlike PKG_PROG_PKG_CONFIG, which checks the user's +dnl installed version of pkg-config, this checks the developer's version +dnl of pkg.m4 when generating configure. +dnl +dnl To ensure that this macro is defined, also add: +dnl m4_ifndef([PKG_PREREQ], +dnl [m4_fatal([must install pkg-config 0.29 or later before running autoconf/autogen])]) +dnl +dnl See the "Since" comment for each macro you use to see what version +dnl of the macros you require. +m4_defun([PKG_PREREQ], +[m4_define([PKG_MACROS_VERSION], [0.29]) +m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1, + [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])]) +])dnl PKG_PREREQ + +dnl PKG_PROG_PKG_CONFIG([MIN-VERSION]) +dnl ---------------------------------- +dnl Since: 0.16 +dnl +dnl Search for the pkg-config tool and set the PKG_CONFIG variable to +dnl first found in the path. Checks that the version of pkg-config found +dnl is at least MIN-VERSION. If MIN-VERSION is not specified, 0.9.0 is +dnl used since that's the first version where most current features of +dnl pkg-config existed. AC_DEFUN([PKG_PROG_PKG_CONFIG], [m4_pattern_forbid([^_?PKG_[A-Z_]+$]) m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$]) @@ -374,18 +405,19 @@ PKG_CONFIG="" fi fi[]dnl -])# PKG_PROG_PKG_CONFIG +])dnl PKG_PROG_PKG_CONFIG -# PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) -# -# Check to see whether a particular set of modules exists. Similar -# to PKG_CHECK_MODULES(), but does not set variables or print errors. -# -# Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG]) -# only at the first occurence in configure.ac, so if the first place -# it's called might be skipped (such as if it is within an "if", you -# have to call PKG_CHECK_EXISTS manually -# -------------------------------------------------------------- +dnl PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) +dnl ------------------------------------------------------------------- +dnl Since: 0.18 +dnl +dnl Check to see whether a particular set of modules exists. Similar to +dnl PKG_CHECK_MODULES(), but does not set variables or print errors. +dnl +dnl Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG]) +dnl only at the first occurence in configure.ac, so if the first place +dnl it's called might be skipped (such as if it is within an "if", you +dnl have to call PKG_CHECK_EXISTS manually AC_DEFUN([PKG_CHECK_EXISTS], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl if test -n "$PKG_CONFIG" && \ @@ -395,8 +427,10 @@ $3])dnl fi]) -# _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES]) -# --------------------------------------------- +dnl _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES]) +dnl --------------------------------------------- +dnl Internal wrapper calling pkg-config via PKG_CONFIG and setting +dnl pkg_failed based on the result. m4_define([_PKG_CONFIG], [if test -n "$$1"; then pkg_cv_[]$1="$$1" @@ -408,10 +442,11 @@ else pkg_failed=untried fi[]dnl -])# _PKG_CONFIG +])dnl _PKG_CONFIG -# _PKG_SHORT_ERRORS_SUPPORTED -# ----------------------------- +dnl _PKG_SHORT_ERRORS_SUPPORTED +dnl --------------------------- +dnl Internal check to see if pkg-config supports short errors. AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED], [AC_REQUIRE([PKG_PROG_PKG_CONFIG]) if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then @@ -419,19 +454,17 @@ else _pkg_short_errors_supported=no fi[]dnl -])# _PKG_SHORT_ERRORS_SUPPORTED +])dnl _PKG_SHORT_ERRORS_SUPPORTED -# PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND], -# [ACTION-IF-NOT-FOUND]) -# -# -# Note that if there is a possibility the first call to -# PKG_CHECK_MODULES might not happen, you should be sure to include an -# explicit call to PKG_PROG_PKG_CONFIG in your configure.ac -# -# -# -------------------------------------------------------------- +dnl PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND], +dnl [ACTION-IF-NOT-FOUND]) +dnl -------------------------------------------------------------- +dnl Since: 0.4.0 +dnl +dnl Note that if there is a possibility the first call to +dnl PKG_CHECK_MODULES might not happen, you should be sure to include an +dnl explicit call to PKG_PROG_PKG_CONFIG in your configure.ac AC_DEFUN([PKG_CHECK_MODULES], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl @@ -485,16 +518,40 @@ AC_MSG_RESULT([yes]) $3 fi[]dnl -])# PKG_CHECK_MODULES +])dnl PKG_CHECK_MODULES + + +dnl PKG_CHECK_MODULES_STATIC(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND], +dnl [ACTION-IF-NOT-FOUND]) +dnl --------------------------------------------------------------------- +dnl Since: 0.29 +dnl +dnl Checks for existence of MODULES and gathers its build flags with +dnl static libraries enabled. Sets VARIABLE-PREFIX_CFLAGS from --cflags +dnl and VARIABLE-PREFIX_LIBS from --libs. +dnl +dnl Note that if there is a possibility the first call to +dnl PKG_CHECK_MODULES_STATIC might not happen, you should be sure to +dnl include an explicit call to PKG_PROG_PKG_CONFIG in your +dnl configure.ac. +AC_DEFUN([PKG_CHECK_MODULES_STATIC], +[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl +_save_PKG_CONFIG=$PKG_CONFIG +PKG_CONFIG="$PKG_CONFIG --static" +PKG_CHECK_MODULES($@) +PKG_CONFIG=$_save_PKG_CONFIG[]dnl +])dnl PKG_CHECK_MODULES_STATIC -# PKG_INSTALLDIR(DIRECTORY) -# ------------------------- -# Substitutes the variable pkgconfigdir as the location where a module -# should install pkg-config .pc files. By default the directory is -# $libdir/pkgconfig, but the default can be changed by passing -# DIRECTORY. The user can override through the --with-pkgconfigdir -# parameter. +dnl PKG_INSTALLDIR([DIRECTORY]) +dnl ------------------------- +dnl Since: 0.27 +dnl +dnl Substitutes the variable pkgconfigdir as the location where a module +dnl should install pkg-config .pc files. By default the directory is +dnl $libdir/pkgconfig, but the default can be changed by passing +dnl DIRECTORY. The user can override through the --with-pkgconfigdir +dnl parameter. AC_DEFUN([PKG_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])]) m4_pushdef([pkg_description], @@ -505,16 +562,18 @@ AC_SUBST([pkgconfigdir], [$with_pkgconfigdir]) m4_popdef([pkg_default]) m4_popdef([pkg_description]) -]) dnl PKG_INSTALLDIR +])dnl PKG_INSTALLDIR -# PKG_NOARCH_INSTALLDIR(DIRECTORY) -# ------------------------- -# Substitutes the variable noarch_pkgconfigdir as the location where a -# module should install arch-independent pkg-config .pc files. By -# default the directory is $datadir/pkgconfig, but the default can be -# changed by passing DIRECTORY. The user can override through the -# --with-noarch-pkgconfigdir parameter. +dnl PKG_NOARCH_INSTALLDIR([DIRECTORY]) +dnl -------------------------------- +dnl Since: 0.27 +dnl +dnl Substitutes the variable noarch_pkgconfigdir as the location where a +dnl module should install arch-independent pkg-config .pc files. By +dnl default the directory is $datadir/pkgconfig, but the default can be +dnl changed by passing DIRECTORY. The user can override through the +dnl --with-noarch-pkgconfigdir parameter. AC_DEFUN([PKG_NOARCH_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])]) m4_pushdef([pkg_description], @@ -525,13 +584,15 @@ AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir]) m4_popdef([pkg_default]) m4_popdef([pkg_description]) -]) dnl PKG_NOARCH_INSTALLDIR +])dnl PKG_NOARCH_INSTALLDIR -# PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE, -# [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) -# ------------------------------------------- -# Retrieves the value of the pkg-config variable for the given module. +dnl PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE, +dnl [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND]) +dnl ------------------------------------------- +dnl Since: 0.28 +dnl +dnl Retrieves the value of the pkg-config variable for the given module. AC_DEFUN([PKG_CHECK_VAR], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl @@ -540,10 +601,10 @@ AS_VAR_COPY([$1], [pkg_cv_][$1]) AS_VAR_IF([$1], [""], [$5], [$4])dnl -])# PKG_CHECK_VAR +])dnl PKG_CHECK_VAR # po.m4 serial 24 (gettext-0.19) -dnl Copyright (C) 1995-2014 Free Software Foundation, Inc. +dnl Copyright (C) 1995-2014, 2016 Free Software Foundation, Inc. dnl This file is free software; the Free Software Foundation dnl gives unlimited permission to copy and/or distribute it, dnl with or without modifications, as long as this notice is preserved. @@ -997,7 +1058,7 @@ ]) # progtest.m4 serial 7 (gettext-0.18.2) -dnl Copyright (C) 1996-2003, 2005, 2008-2015 Free Software Foundation, Inc. +dnl Copyright (C) 1996-2003, 2005, 2008-2016 Free Software Foundation, Inc. dnl This file is free software; the Free Software Foundation dnl gives unlimited permission to copy and/or distribute it, dnl with or without modifications, as long as this notice is preserved. diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/config/Makefile.am new/firewalld-0.4.3.2/config/Makefile.am --- old/firewalld-0.4.3.1/config/Makefile.am 2016-04-26 14:58:41.000000000 +0200 +++ new/firewalld-0.4.3.2/config/Makefile.am 2016-07-05 15:50:25.000000000 +0200 @@ -130,6 +130,7 @@ services/ptp.xml \ services/pulseaudio.xml \ services/puppetmaster.xml \ + services/RH-Satellite-6.xml \ services/radius.xml \ services/rpc-bind.xml \ services/rsyncd.xml \ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/config/Makefile.in new/firewalld-0.4.3.2/config/Makefile.in --- old/firewalld-0.4.3.1/config/Makefile.in 2016-06-28 14:18:36.000000000 +0200 +++ new/firewalld-0.4.3.2/config/Makefile.in 2016-07-05 15:50:30.000000000 +0200 @@ -410,6 +410,7 @@ services/ptp.xml \ services/pulseaudio.xml \ services/puppetmaster.xml \ + services/RH-Satellite-6.xml \ services/radius.xml \ services/rpc-bind.xml \ services/rsyncd.xml \ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/config/services/RH-Satellite-6.xml new/firewalld-0.4.3.2/config/services/RH-Satellite-6.xml --- old/firewalld-0.4.3.1/config/services/RH-Satellite-6.xml 1970-01-01 01:00:00.000000000 +0100 +++ new/firewalld-0.4.3.2/config/services/RH-Satellite-6.xml 2016-07-05 15:45:57.000000000 +0200 @@ -0,0 +1,12 @@ +<?xml version="1.0" encoding="utf-8"?> +<service> + <short>Red Hat Satellite 6</short> + <description>Red Hat Satellite 6 is a systems management server that can be used to configure new systems, subscribe to updates, and maintain installations in distributed environments.</description> + <port protocol="tcp" port="80"/> + <port protocol="tcp" port="443"/> + <port protocol="tcp" port="5646-5647"/> + <port protocol="tcp" port="5671"/> + <port protocol="tcp" port="8140"/> + <port protocol="tcp" port="8080"/> + <port protocol="tcp" port="9090"/> +</service> diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/configure new/firewalld-0.4.3.2/configure --- old/firewalld-0.4.3.1/configure 2016-06-28 14:18:35.000000000 +0200 +++ new/firewalld-0.4.3.2/configure 2016-07-04 17:10:16.000000000 +0200 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for firewalld 0.4.3.1. +# Generated by GNU Autoconf 2.69 for firewalld 0.4.3.2. # # # Copyright (C) 1992-1996, 1998-2012 Free Software Foundation, Inc. @@ -577,8 +577,8 @@ # Identity of this package. PACKAGE_NAME='firewalld' PACKAGE_TARNAME='firewalld' -PACKAGE_VERSION='0.4.3.1' -PACKAGE_STRING='firewalld 0.4.3.1' +PACKAGE_VERSION='0.4.3.2' +PACKAGE_STRING='firewalld 0.4.3.2' PACKAGE_BUGREPORT='' PACKAGE_URL='' @@ -1299,7 +1299,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures firewalld 0.4.3.1 to adapt to many kinds of systems. +\`configure' configures firewalld 0.4.3.2 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1365,7 +1365,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of firewalld 0.4.3.1:";; + short | recursive ) echo "Configuration of firewalld 0.4.3.2:";; esac cat <<\_ACEOF @@ -1471,7 +1471,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -firewalld configure 0.4.3.1 +firewalld configure 0.4.3.2 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -1488,7 +1488,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by firewalld $as_me 0.4.3.1, which was +It was created by firewalld $as_me 0.4.3.2, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -2354,7 +2354,7 @@ # Define the identity of the package. PACKAGE='firewalld' - VERSION='0.4.3.1' + VERSION='0.4.3.2' # Some tools Automake needs. @@ -2561,7 +2561,7 @@ #define PACKAGE_RELEASE "$PACKAGE_RELEASE" _ACEOF -PACKAGE_TAG='v0.4.3.1' +PACKAGE_TAG='v0.4.3.2' cat >>confdefs.h <<_ACEOF #define PACKAGE_TAG "$PACKAGE_TAG" @@ -5169,7 +5169,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by firewalld $as_me 0.4.3.1, which was +This file was extended by firewalld $as_me 0.4.3.2, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -5226,7 +5226,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -firewalld config.status 0.4.3.1 +firewalld config.status 0.4.3.2 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-applet.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-applet.1 --- old/firewalld-0.4.3.1/doc/man/man1/firewall-applet.1 2016-06-28 14:23:42.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man1/firewall-applet.1 2016-07-05 15:51:44.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewall-applet -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALL\-APPLET" "1" "" "firewalld 0.4.3.1" "firewall-applet" +.TH "FIREWALL\-APPLET" "1" "" "firewalld 0.4.3.2" "firewall-applet" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-cmd.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-cmd.1 --- old/firewalld-0.4.3.1/doc/man/man1/firewall-cmd.1 2016-06-28 16:48:48.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man1/firewall-cmd.1 2016-07-05 15:54:08.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewall-cmd -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALL\-CMD" "1" "" "firewalld 0.4.3.1" "firewall-cmd" +.TH "FIREWALL\-CMD" "1" "" "firewalld 0.4.3.2" "firewall-cmd" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-config.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-config.1 --- old/firewalld-0.4.3.1/doc/man/man1/firewall-config.1 2016-06-28 14:23:43.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man1/firewall-config.1 2016-07-05 15:51:44.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewall-config -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALL\-CONFIG" "1" "" "firewalld 0.4.3.1" "firewall-config" +.TH "FIREWALL\-CONFIG" "1" "" "firewalld 0.4.3.2" "firewall-config" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewall-offline-cmd.1 new/firewalld-0.4.3.2/doc/man/man1/firewall-offline-cmd.1 --- old/firewalld-0.4.3.1/doc/man/man1/firewall-offline-cmd.1 2016-06-28 14:23:44.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man1/firewall-offline-cmd.1 2016-07-05 15:51:45.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewall-offline-cmd -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALL\-OFFLINE\-C" "1" "" "firewalld 0.4.3.1" "firewall-offline-cmd" +.TH "FIREWALL\-OFFLINE\-C" "1" "" "firewalld 0.4.3.2" "firewall-offline-cmd" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewallctl.1 new/firewalld-0.4.3.2/doc/man/man1/firewallctl.1 --- old/firewalld-0.4.3.1/doc/man/man1/firewallctl.1 2016-06-28 14:23:43.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man1/firewallctl.1 2016-07-05 15:51:45.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewallctl -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLCTL" "1" "" "firewalld 0.4.3.1" "firewallctl" +.TH "FIREWALLCTL" "1" "" "firewalld 0.4.3.2" "firewallctl" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man1/firewalld.1 new/firewalld-0.4.3.2/doc/man/man1/firewalld.1 --- old/firewalld-0.4.3.1/doc/man/man1/firewalld.1 2016-06-28 14:23:43.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man1/firewalld.1 2016-07-05 15:51:45.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD" "1" "" "firewalld 0.4.3.1" "firewalld" +.TH "FIREWALLD" "1" "" "firewalld 0.4.3.2" "firewalld" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.conf.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.conf.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.conf.5 2016-06-28 14:23:44.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.conf.5 2016-07-05 15:51:45.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.conf -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.CONF" "5" "" "firewalld 0.4.3.1" "firewalld.conf" +.TH "FIREWALLD\&.CONF" "5" "" "firewalld 0.4.3.2" "firewalld.conf" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.dbus.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.dbus.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.dbus.5 2016-06-28 14:23:45.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.dbus.5 2016-07-05 15:51:46.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.dbus -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.DBUS" "5" "" "firewalld 0.4.3.1" "firewalld.dbus" +.TH "FIREWALLD\&.DBUS" "5" "" "firewalld 0.4.3.2" "firewalld.dbus" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.direct.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.direct.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.direct.5 2016-06-28 14:23:45.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.direct.5 2016-07-05 15:51:46.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.direct -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.DIRECT" "5" "" "firewalld 0.4.3.1" "firewalld.direct" +.TH "FIREWALLD\&.DIRECT" "5" "" "firewalld 0.4.3.2" "firewalld.direct" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.icmptype.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.icmptype.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.icmptype.5 2016-06-28 14:23:45.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.icmptype.5 2016-07-05 15:51:47.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.icmptype -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.ICMPTYPE" "5" "" "firewalld 0.4.3.1" "firewalld.icmptype" +.TH "FIREWALLD\&.ICMPTYPE" "5" "" "firewalld 0.4.3.2" "firewalld.icmptype" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.ipset.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.ipset.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.ipset.5 2016-06-28 14:23:45.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.ipset.5 2016-07-05 15:51:47.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.ipset -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.IPSET" "5" "" "firewalld 0.4.3.1" "firewalld.ipset" +.TH "FIREWALLD\&.IPSET" "5" "" "firewalld 0.4.3.2" "firewalld.ipset" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.lockdown-whitelist.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.lockdown-whitelist.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.lockdown-whitelist.5 2016-06-28 14:23:46.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.lockdown-whitelist.5 2016-07-05 15:51:47.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.lockdown-whitelist -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.LOCKDOWN" "5" "" "firewalld 0.4.3.1" "firewalld.lockdown-whitelist" +.TH "FIREWALLD\&.LOCKDOWN" "5" "" "firewalld 0.4.3.2" "firewalld.lockdown-whitelist" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.richlanguage.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.richlanguage.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.richlanguage.5 2016-06-28 14:23:46.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.richlanguage.5 2016-07-05 15:51:47.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.richlanguage -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.RICHLANG" "5" "" "firewalld 0.4.3.1" "firewalld.richlanguage" +.TH "FIREWALLD\&.RICHLANG" "5" "" "firewalld 0.4.3.2" "firewalld.richlanguage" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.service.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.service.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.service.5 2016-06-28 14:23:46.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.service.5 2016-07-05 15:51:48.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.service -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.SERVICE" "5" "" "firewalld 0.4.3.1" "firewalld.service" +.TH "FIREWALLD\&.SERVICE" "5" "" "firewalld 0.4.3.2" "firewalld.service" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.zone.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.zone.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.zone.5 2016-06-28 14:23:46.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.zone.5 2016-07-05 15:51:48.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.zone -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.ZONE" "5" "" "firewalld 0.4.3.1" "firewalld.zone" +.TH "FIREWALLD\&.ZONE" "5" "" "firewalld 0.4.3.2" "firewalld.zone" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/doc/man/man5/firewalld.zones.5 new/firewalld-0.4.3.2/doc/man/man5/firewalld.zones.5 --- old/firewalld-0.4.3.1/doc/man/man5/firewalld.zones.5 2016-06-28 14:23:47.000000000 +0200 +++ new/firewalld-0.4.3.2/doc/man/man5/firewalld.zones.5 2016-07-05 15:51:48.000000000 +0200 @@ -4,10 +4,10 @@ .\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/> .\" Date: .\" Manual: firewalld.zones -.\" Source: firewalld 0.4.3.1 +.\" Source: firewalld 0.4.3.2 .\" Language: English .\" -.TH "FIREWALLD\&.ZONES" "5" "" "firewalld 0.4.3.1" "firewalld.zones" +.TH "FIREWALLD\&.ZONES" "5" "" "firewalld 0.4.3.2" "firewalld.zones" .\" ----------------------------------------------------------------- .\" * Define some portability stuff .\" ----------------------------------------------------------------- diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/firewalld.spec new/firewalld-0.4.3.2/firewalld.spec --- old/firewalld-0.4.3.1/firewalld.spec 2016-06-28 14:18:12.000000000 +0200 +++ new/firewalld-0.4.3.2/firewalld.spec 2016-07-05 15:48:33.000000000 +0200 @@ -7,7 +7,7 @@ Summary: A firewall daemon with D-Bus interface providing a dynamic firewall Name: firewalld -Version: 0.4.3.1 +Version: 0.4.3.2 Release: 1%{?dist} URL: http://www.firewalld.org License: GPLv2+ @@ -300,6 +300,13 @@ %{_mandir}/man1/firewall-config*.1* %changelog +* Mon Jul 4 2016 Thomas Woerner <[email protected]> - 0.4.3.2-1 +- Fix regression with unavailable optional commands +- All missing backend messages should be warnings +- Individual calls for missing restore commands +- Only one authenticate call for add and remove options and also sequences +- New service RH-Satellite-6 + * Tue Jun 28 2016 Thomas Woerner <[email protected]> - 0.4.3.1-1 - firewall.command: Fix python3 DBusException message not interable error - src/Makefile.am: Fix path in firewall-[offline-]cmd_test.sh while installing diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/command.py new/firewalld-0.4.3.2/src/firewall/command.py --- old/firewalld-0.4.3.1/src/firewall/command.py 2016-06-28 13:55:22.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewall/command.py 2016-07-05 15:32:20.000000000 +0200 @@ -36,6 +36,10 @@ self.quiet = quiet self.verbose = verbose self.__use_exception_handler = True + self.fw = None + + def set_fw(self, fw): + self.fw = fw def set_quiet(self, flag): self.quiet = flag @@ -83,6 +87,8 @@ "add": "ALREADY_ENABLED", "remove": "NOT_ENABLED", } + if self.fw is not None: + self.fw.authorizeAll() items = [ ] _errors = 0 for item in option: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/config/__init__.py new/firewalld-0.4.3.2/src/firewall/config/__init__.py --- old/firewalld-0.4.3.1/src/firewall/config/__init__.py 2016-06-28 14:18:37.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewall/config/__init__.py 2016-07-04 17:10:17.000000000 +0200 @@ -42,7 +42,7 @@ DATADIR = '/usr/share/' + DAEMON_NAME CONFIG_GLADE_NAME = CONFIG_NAME + '.glade' COPYRIGHT = '(C) 2010-2016 Red Hat, Inc.' -VERSION = '0.4.3.1' +VERSION = '0.4.3.2' AUTHORS = [ "Thomas Woerner <[email protected]>", "Jiri Popelka <[email protected]>", diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/ebtables.py new/firewalld-0.4.3.2/src/firewall/core/ebtables.py --- old/firewalld-0.4.3.1/src/firewall/core/ebtables.py 2016-05-27 11:16:12.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewall/core/ebtables.py 2016-07-04 15:03:02.000000000 +0200 @@ -59,6 +59,11 @@ self.restore_noflush_option = self._detect_restore_noflush_option() self.concurrent_option = self._detect_concurrent_option() self.__remove_dangling_lock() + self.fill_exists() + + def fill_exists(self): + self.command_exists = os.path.exists(self._command) + self.restore_command_exists = os.path.exists(self._restore_command) def __remove_dangling_lock(self): if os.path.exists(self.ebtables_lock): diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/fw.py new/firewalld-0.4.3.2/src/firewall/core/fw.py --- old/firewalld-0.4.3.1/src/firewall/core/fw.py 2016-05-25 17:23:35.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewall/core/fw.py 2016-07-04 15:03:02.000000000 +0200 @@ -123,7 +123,7 @@ if self.ebtables_enabled and \ "filter" not in self.get_available_tables("eb"): - log.error("ebtables not usable, disabling ethernet bridge firewall.") + log.warning("ebtables not usable, disabling ethernet bridge firewall.") self.ebtables_enabled = False # is there at least support for ipv4 or ipv6 @@ -135,7 +135,7 @@ try: self.ipset_backend.list() except ValueError: - log.error("ipset not usable, disabling ipset usage in firewall.") + log.warning("ipset not usable, disabling ipset usage in firewall.") # ipset is not usable, no supported types self.ipset_enabled = False self.ipset_supported_types = [ ] @@ -143,6 +143,41 @@ # ipset is usable, get all supported types self.ipset_supported_types = self.ipset_backend.supported_types() + self.ip4tables_backend.fill_exists() + if not self.ip4tables_backend.restore_command_exists: + if self.ip4tables_backend.command_exists: + log.warning("iptables-restore is missing, using " + "individual calls for IPv4 firewall.") + else: + log.warning("iptables-restore and iptables are missing, " + "disabling IPv4 firewall.") + self.ip4tables_enabled = False + + self.ip6tables_backend.fill_exists() + if not self.ip6tables_backend.restore_command_exists: + if self.ip6tables_backend.command_exists: + log.warning("ip6tables-restore is missing, using " + "individual calls for IPv6 firewall.") + else: + log.warning("ip6tables-restore and ip6tables are missing, " + "disabling IPv6 firewall.") + self.ip6tables_enabled = False + + self.ebtables_backend.fill_exists() + if not self.ebtables_backend.restore_command_exists: + if self.ebtables_backend.command_exists: + log.warning("ebtables-restore is missing, using " + "individual calls for bridge firewall.") + else: + log.warning("ebtables-restore and ebtables are missing, " + "disabling bridge firewall.") + self.ebtables_enabled = False + + if self.ebtables_enabled and not self._individual_calls and \ + not self.ebtables_backend.restore_noflush_option: + log.debug1("ebtables-restore is not supporting the --noflush " + "option, will therefore not be used") + def _start(self, reload=False, complete_reload=False): # initialize firewall default_zone = config.FALLBACK_ZONE @@ -201,10 +236,6 @@ self._log_denied = value.lower() log.debug1("LogDenied is set to '%s'", self._log_denied) - if self.ebtables_enabled and not self._individual_calls and \ - not self.ebtables_backend.restore_noflush_option: - log.debug1("ebtables-restore is not supporting the --noflush option, will therefore not be used") - self.config.set_firewalld_conf(copy.deepcopy(self._firewalld_conf)) self._start_check() @@ -814,6 +845,7 @@ return "" if self._individual_calls or \ + not backend.restore_command_exists or \ (ipv == "eb" and not self.ebtables_backend.restore_noflush_option): for i,rule in enumerate(_rules): # remove leading and trailing '"' for use with execve diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/ipXtables.py new/firewalld-0.4.3.2/src/firewall/core/ipXtables.py --- old/firewalld-0.4.3.1/src/firewall/core/ipXtables.py 2016-06-23 17:16:55.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewall/core/ipXtables.py 2016-07-04 15:03:02.000000000 +0200 @@ -150,6 +150,11 @@ self._command = config.COMMANDS[self.ipv] self._restore_command = config.COMMANDS["%s-restore" % self.ipv] self.wait_option = self._detect_wait_option() + self.fill_exists() + + def fill_exists(self): + self.command_exists = os.path.exists(self._command) + self.restore_command_exists = os.path.exists(self._restore_command) def __run(self, args): # convert to string list diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall/core/prog.py new/firewalld-0.4.3.2/src/firewall/core/prog.py --- old/firewalld-0.4.3.1/src/firewall/core/prog.py 2016-06-27 18:22:36.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewall/core/prog.py 2016-07-04 15:02:58.000000000 +0200 @@ -37,9 +37,13 @@ input_string = handle.read().encode() env = {'LANG': 'C'} - process = subprocess.Popen(args, stdin=subprocess.PIPE, - stdout=subprocess.PIPE, close_fds=True, - env=env) + try: + process = subprocess.Popen(args, stdin=subprocess.PIPE, + stdout=subprocess.PIPE, close_fds=True, + env=env) + except OSError: + return (255, '') + (output, _) = process.communicate(input_string) if output is not None: output = output.decode('utf-8', 'replace') diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewall-cmd new/firewalld-0.4.3.2/src/firewall-cmd --- old/firewalld-0.4.3.1/src/firewall-cmd 2016-06-22 14:32:00.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewall-cmd 2016-07-04 15:41:25.000000000 +0200 @@ -917,6 +917,7 @@ cmd.print_and_exit ("not running", errors.NOT_RUNNING) else: cmd.print_and_exit ("FirewallD is not running", errors.NOT_RUNNING) +cmd.set_fw(fw) if options_zone_ops and not zone and not (a.service and options_service): default = fw.getDefaultZone() diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/firewalld-0.4.3.1/src/firewallctl new/firewalld-0.4.3.2/src/firewallctl --- old/firewalld-0.4.3.1/src/firewallctl 2016-06-28 13:55:22.000000000 +0200 +++ new/firewalld-0.4.3.2/src/firewallctl 2016-07-04 15:41:35.000000000 +0200 @@ -1720,6 +1720,7 @@ cmd.print_and_exit("not running", errors.NOT_RUNNING) else: cmd.print_and_exit("FirewallD is not running", errors.NOT_RUNNING) +cmd.set_fw(fw) # version if args.parser == "version":
