From 56a597689e7509193b0924a635d2022f21b1a3e4 Mon Sep 17 00:00:00 2001 From: V3n3RiX Date: Mon, 4 Mar 2024 11:43:04 +0000 Subject: gentoo auto-resync : 04:03:2024 - 11:43:04 --- net-firewall/Manifest.gz | Bin 4227 -> 4224 bytes net-firewall/fwknop/Manifest | 3 + net-firewall/fwknop/fwknop-2.6.11.ebuild | 133 +++++++++++++++++++++++++++++++ 3 files changed, 136 insertions(+) create mode 100644 net-firewall/fwknop/fwknop-2.6.11.ebuild (limited to 'net-firewall') diff --git a/net-firewall/Manifest.gz b/net-firewall/Manifest.gz index 76cc1951fcc3..000f5ba364e8 100644 Binary files a/net-firewall/Manifest.gz and b/net-firewall/Manifest.gz differ diff --git a/net-firewall/fwknop/Manifest b/net-firewall/fwknop/Manifest index f46f7735a6e5..4dbcd592347a 100644 --- a/net-firewall/fwknop/Manifest +++ b/net-firewall/fwknop/Manifest @@ -4,5 +4,8 @@ AUX fwknopd.init 2706 BLAKE2B 561cc62b1e557d425648947c25751dfb2fe323b04cb96ea1d0 AUX fwknopd.service 235 BLAKE2B c46c01121a745ee46a5415654c0ba422531008ed52915833712f748026eda3afd8019d6ec6bb86434b40ad273a4cc46115d3a64a73b621731ec68f3bad92dc41 SHA512 890bbba586183275cbd3b420a9c0d609ff3eca0fd239b4af97e2730e2790f317fc114f51d60107ba4fbddd2cabb60c70d8b615e2a75bb80cf27d352c894a1c6d AUX fwknopd.tmpfiles.conf 31 BLAKE2B 81d88d9bb1fd826c242b2815e1a6c0e5a300f22e19dd65ad67e114d692731cb532162ac877f0239879ebfcf0432d61053adcddd2c234d85ed60bf33720b22dcc SHA512 73b56a42c7728c9dabd82cd81bd6ffa1b948fe80fa67feee348ad65f957f1f2ea53c6b5d74fa2784ea75c45c2c27b5d989da4a618f3a4cf67914c927e04b74ae DIST fwknop-2.6.10.tar.gz 1988197 BLAKE2B d4c2010c64ab160f0edc02e2b1530749ee47ff6ed16d6b556d366daef7ce5e22ef38fbbbf6e8cfaa14e0d9706ba2b65937b03c70b54b3429ff1732ae33c1852c SHA512 3b3e35eda574abd1759431c88677eea7078c54cb3252c0ee0e1019b5b8224ed8844d30760da70a952e1cd92b04715a547f6effabda54678f791fff9afa32cd80 +DIST fwknop-2.6.11.tar.bz2 1812061 BLAKE2B 7cfb8abc95fd8aa8a8d6774507fe4dea8deacc5aa4c9f5874c39dc2a3ab0c413cf479632a34027c76180cecd0a4fbf11d8cac5fe77f48993932fab13ea740a0b SHA512 79ce0585d075dffe77143b4d6ec3f8653ddad5f46cfb596e9f373be0065bdace7efdfe9cd341ebfaa7232d39f905affa81325b569635c8a44095fd551debadd7 +DIST fwknop-2.6.11.tar.bz2.asc 195 BLAKE2B 56ea868bd31fc4d06e3e976042bd3969f2c8df5bcb1e6a12d87c5740eb39b2eaf1118620be260e94b07758f4bc875e58f6b63a7989cdc08a32f049aa208b57a3 SHA512 2902a9ccb1c82baa4a96af5841d21ac873b606876fe01e8fbcf2b1e2a89c75965477f574c62a6f261f2af4420038ea6d41ef66af57b79742527054593e3cd3d7 EBUILD fwknop-2.6.10-r3.ebuild 3381 BLAKE2B 11a3b8bd6ed3888e3526f541fe9fd1822a7adc66354136ecd62d164364724d9960a62f40acea02fecf51e45743cab0d72ae4cd9b2fbe155da1a445c6f8a96837 SHA512 5d897a9b3cca73a4285ae56925c392fbf00df3b58c7abdebc7d71a8848611c968c02e39efee2bb463fd9f450ce6b0e99af0e5fcd660707979e9f7c08e1bb8bf3 +EBUILD fwknop-2.6.11.ebuild 3586 BLAKE2B aa35e02ea67d1eafcec2dcb2d4273509bdef3b75bc636a203f2f4e0366594a555d2cf60fb8e48baa4f2426f7278f7d4ae1e6e5a5c4a2be1bde6193d980855d2c SHA512 cbc2053d796b55bf07c74955d9f9432aa82ae2ebbe1d6329560618133749692c3dc92d11ae8245666014337ba4343ec5e8c86a71f0f5d3de32a44bf5ae813877 MISC metadata.xml 1248 BLAKE2B 0e1cee756e1e5cf4ae7b4334b6d2dcb2f6ad67cf930d72cb6ab7ee4c84e3218474af88d3f3c03b306777be20e8763c771d28eb5762ae0d889f93dd8d559bc75a SHA512 8fb3ec7045a512f7c08250b5533a11a50a87ebf21837acd7c25db52434e7c55f2981adec0e8618824c1bfae8d8fc3200d7c2f94b4405bbffab010bdc60ca1c74 diff --git a/net-firewall/fwknop/fwknop-2.6.11.ebuild b/net-firewall/fwknop/fwknop-2.6.11.ebuild new file mode 100644 index 000000000000..2ae43d31f5f7 --- /dev/null +++ b/net-firewall/fwknop/fwknop-2.6.11.ebuild @@ -0,0 +1,133 @@ +# Copyright 1999-2024 Gentoo Authors +# Distributed under the terms of the GNU General Public License v2 + +EAPI=8 + +VERIFY_SIG_OPENPGP_KEY_PATH=/usr/share/openpgp-keys/fwknop.gpg +inherit autotools linux-info readme.gentoo-r1 systemd tmpfiles verify-sig + +DESCRIPTION="Single Packet Authorization and Port Knocking application" +HOMEPAGE="https://www.cipherdyne.org/fwknop/" +SRC_URI=" + https://www.cipherdyne.org/fwknop/download/${P}.tar.bz2 + verify-sig? ( https://www.cipherdyne.org/fwknop/download/${P}.tar.bz2.asc ) + " + +LICENSE="GPL-2+" +SLOT="0" +KEYWORDS="~amd64 ~x86" +IUSE="+client extras firewalld gdbm gpg +iptables nfqueue +server static-libs udp-server" + +DEPEND=" + client? ( net-misc/wget[ssl] ) + firewalld? ( net-firewall/firewalld ) + gdbm? ( sys-libs/gdbm ) + gpg? ( + app-crypt/gpgme:= + dev-libs/libassuan + dev-libs/libgpg-error + ) + iptables? ( net-firewall/iptables ) + nfqueue? ( net-libs/libnetfilter_queue ) + server? ( !nfqueue? ( !udp-server? ( net-libs/libpcap ) ) ) + verify-sig? ( sec-keys/openpgp-keys-fwknop ) +" +RDEPEND="${DEPEND}" + +REQUIRED_USE=" + nfqueue? ( server ) + server? ( ^^ ( firewalld iptables ) ) + udp-server? ( server ) +" + +##PATCHES=( "${FILESDIR}/${PN}-2.6.10_fno-common_fix.patch" ) + +DOCS=( AUTHORS ChangeLog README ) + +DISABLE_AUTOFORMATTING=1 +DOC_CONTENTS=" +Example configuration files were installed to '${EPREFIX}/etc/fwknopd/'. +Please edit them to suit your needs and then remove the .example suffix. + +fwknopd supports several backends: firewalld, iptables, ipfw, pf, ipf. +You can set the desired backend via FIREWALL_EXE option in fwknopd.conf +instead of the default one chosen at compile time. +" + +pkg_setup() { + linux-info_pkg_setup +} + +src_prepare() { + default_src_prepare + + # Install example configs with .example suffix. + if use server; then + sed -i -e 's|conf;|conf.example;|g' Makefile.am || die + fi + + eautoreconf +} + +src_configure() { + local myeconfargs=( + --localstatedir="${EPREFIX}/run" + $(use_enable client) + $(use_enable !gdbm file-cache) + $(use_enable nfqueue nfq-capture) + $(use_enable server) + $(use_enable udp-server) + $(use_with gpg gpgme) + ) + use firewalld && myeconfargs+=(--with-firewalld="${EPREFIX}/usr/sbin/firewalld") + use iptables && myeconfargs+=(--with-iptables="${EPREFIX}/sbin/iptables") + + econf "${myeconfargs[@]}" +} + +src_install() { + default_src_install + + if use extras; then + dodoc extras/apparmor/usr.sbin.fwknopd + dodoc extras/console-qr/console-qr.sh + dodoc extras/fwknop-launcher/* + fi + + if use server; then + newinitd "${FILESDIR}/fwknopd.init" fwknopd + newconfd "${FILESDIR}/fwknopd.confd" fwknopd + systemd_dounit extras/systemd/fwknopd.service + newtmpfiles "${FILESDIR}/fwknopd.tmpfiles.conf" fwknopd.conf + readme.gentoo_create_doc + fi + + find "${ED}" -type f -name "*.la" -delete || die + + if ! use static-libs ; then + find "${ED}" -type f -name libfko.a -delete || die + fi +} + +pkg_postinst() { + if use server; then + readme.gentoo_print_elog + + tmpfiles_process fwknopd.conf + + if ! linux_config_exists || ! linux_chkconfig_present NETFILTER_XT_MATCH_COMMENT; then + echo + ewarn "fwknopd daemon relies on the 'comment' match in order to expire" + ewarn "created firewall rules, which is an important security feature." + ewarn "Please enable NETFILTER_XT_MATCH_COMMENT support in your kernel." + echo + fi + if use nfqueue && \ + ! linux_config_exists || ! linux_chkconfig_present NETFILTER_XT_TARGET_NFQUEUE; then + echo + ewarn "fwknopd daemon relies on the 'NFQUEUE' target for NFQUEUE mode." + ewarn "Please enable NETFILTER_XT_TARGET_NFQUEUE support in your kernel." + echo + fi + fi +} -- cgit v1.2.3