aboutsummaryrefslogtreecommitdiffstats
path: root/meta-networking/recipes-filter
AgeCommit message (Collapse)Author
2020-07-12nftables: upgrade 0.9.5 -> 0.9.6Zang Ruochen
Signed-off-by: Zang Ruochen <zangrc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit b0d884a994197a9bc0b181545fe67f19a7630cd7) [AK: This release fixes vmap support which broke in the previous 0.9.5 release.] Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01nftables: upgrade 0.9.4 -> 0.9.5Pierre-Jean Texier
Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit bf1ac503e8a54387a6b46623235dadff0d14596e) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-07-01libnftnl: upgrade 1.1.6 -> 1.1.7Pierre-Jean Texier
See https://lwn.net/Articles/822353/ Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com> (cherry picked from commit 9e7912b8fd841001a2ffb78dc32edc86fd70b8cd) Signed-off-by: Armin Kuster <akuster808@gmail.com>
2020-04-08conntrack-tools: upgrade 1.4.5 -> 1.4.6Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-08libnetfilter-conntrack: upgrade 1.0.7 -> 1.0.8Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-03nftables: upgrade 0.9.3 -> 0.9.4Pierre-Jean Texier
See https://lwn.net/Articles/816528/ Also remove patch applied upstream Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-04-03libnftnl: upgrade 1.1.5 -> 1.1.6Pierre-Jean Texier
This includes the following changes: ac0778e build: libnftnl 1.1.6 release 60e6d9b include: update nf_tables.h. c8cc25b Revert "bitwise: add support for passing mask and xor via registers." 4bf470b expr: nat: snprint flags in hexadecimal ff92868 expr: masq: revisit _snprintf() c76d36a set: support for NFTNL_SET_EXPR 9270557 set_elem: missing set and build for NFTNL_SET_ELEM_EXPR 4c8abad chain: add NFTNL_CHAIN_FLAGS 75b8778 bitwise: add support for passing mask and xor via registers. 8db0a94 include: update nf_tables.h. 7b4848c tests: bitwise: fix error message. ec3622b src: add nftnl_*_{get,set}_array() 629ee38 src: Fix for reading garbage in nftnl_chain getters 04cc28d set_elem: Introduce support for NFTNL_SET_ELEM_KEY_END 7cd41b5 set: Add support for NFTA_SET_DESC_CONCAT attributes 131a6c2 include: resync nf_tables.h cache copy 8fa63d7 bitwise: add support for left- and right-shifts. 3f232d7 bitwise: add support for new netlink attributes. 3fb5640 include: update nf_tables.h. 154104a bitwise: add helper to print boolean expressions. 66d6afb bitwise: fix some incorrect indentation. 35bac9a Update gitignore. 325cb6f include: Remove buffer.h 6079297 expr: meta: add slave device matching 7e15d9d udata: support for TLV attribute nesting 7f72b5c udata: add NFTNL_UDATA_SET_*TYPEOF* definitions d16abf7 include: typo in object.h C++ wrapper dfe3828 examples: Replace use of deprecated symbols d95a703 chain: Correctly check realloc() call 835d645 flowtable: Correctly check realloc() call 32a8c5f chain: Fix memleak in error path of nftnl_chain_parse_devs() ba1b025 flowtable: Fix memleak in error path of nftnl_flowtable_parse_devs() b238876 tests: flowtable: Don't check NFTNL_FLOWTABLE_SIZE Signed-off-by: Pierre-Jean Texier <pjtexier@koncepto.io> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2020-01-06arno-iptables-firewall: upgrade 2.0.3 -> 2.1.0Wang Mingyu
Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-20nftables: Package python scripts into nonarch libdirKhem Raj
Helps fixing packaging errors on mulilib builds Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-17nftables: Expand PACKAGECONFIG, cleanup buildAlex Kiernan
Fill out PACKAGECONFIG options for json, mini-gmp, readline and xtables whilst matching existing behaviour. Drop PACKAGECONFIG to weak default. Fix upstream version matching so the very old 0.099 is rejected as the newest version. Drop seemingly redundant ASNEEDED which was added in 5477d5bcb727 ("nftables: Upgrade to 0.7") without explanation. Package python files from libdir not libdir_native; whilst they're the same thing, building a target package with native variables is odd. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-16nftables: upgrade 0.9.2 -> 0.9.3Todd Cunningham
New patch: 0001-update-python3-nftables-reference.patch Signed-off-by: Todd Cunningham <tcunningham07@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-13libnftnl: upgrade 1.1.4 -> 1.1.5Todd Cunningham
Remove obselete patch: 0001-Move-exports-before-symbol-definition.patch Refresh patch: 0002-avoid-naming-local-function-as-one-of-printf-family.patch Add one new file in this patch: src/obj/synproxy.c Signed-off-by: Todd Cunningham <tcunningham07@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-12-03nftables: Fix documentation generationAlex Kiernan
Switch PACKAGECONFIG from man to manpages so we are included when api-documentation is set. Ensure correct tools are available to build the documentation and avoid unsupported option failures by not passing `--enable-man-doc`. Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-27nftables: update to 0.9.2Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-08-20libnftnl: upgrade 1.1.3 -> 1.1.4Yuan Chao
Refresh patch: 0002-avoid-naming-local-function-as-one-of-printf-family.patch Add two new file in this patch: src/expr/synproxy.c src/obj/ct_expect.c Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-23nftables: 0.9.0 > 0.9.1Mariano Lopez
The upgrade includes a new python library, therefore added the {PN}-python package. Signed-off-by: Mariano López <just.another.mariano@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-21arno-iptables-firewall: Switch to git fetcherKhem Raj
github archives are not reliable Fixes arno-iptables-firewall-2.0.3: https://github.com/arno-iptables-firewall/aif/archive/2.0.3.tar.gz: SRC_URI uses unstable GitHub archives [src-uri-bad] Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-07-13libnftnl: update to 1.1.3Oleksandr Kravchuk
Updated libnftnl to 1.1.3 and refreshed patches. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10conntrack-tools: update to 1.4.5Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-10libnetfilter-conntrack: update to 1.0.7Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-08libnetfilter-queue: fix update to 1.0.3Oleksandr Kravchuk
SRC_URI was mistakenly not updated in @57967659f4724a8b614f. Removed patch was upstreamed. Another one was refreshed with devtool. Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-06ebtables: add UPSTREAM_CHECK_URIOleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-05-05arno-iptables-firewall: update to 2.0.3Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29libnetfilter-queue: update to 1.0.3Oleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29nftables: add UPSTREAM_CHECK_URIOleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2019-04-29nfacct: add UPSTREAM_CHECK_URIOleksandr Kravchuk
Signed-off-by: Oleksandr Kravchuk <open.source@oleksandr-kravchuk.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12nftables: Upgrade to 0.9.0Alex Kiernan
Drop all the backports as they're upstream Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-11-12libnftnl: Upgrade to 1.1.1Alex Kiernan
Signed-off-by: Alex Kiernan <alex.kiernan@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-08-19nftables: add dependency on bison-nativeMartin Jansa
* fixes: checking whether yytext is a pointer... no checking for bison... no checking for byacc... no *** Error: No suitable bison/yacc found. *** Please install the 'bison' package. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-05-29ebtables: add RECIPE_UPSTREAM_VERSIONYi Zhao
Signed-off-by: Yi Zhao <yi.zhao@windriver.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
2018-05-17recipes: Link with libtirpcKhem Raj
glibc no longer provides rpc implementation Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-13libnetfilter-cthelper: refresh patchesArmin Kuster
WARNING: libnetfilter-cthelper-1.0.0-r0 do_patch: Some of the context lines in patches were ignored. This can lead to incorrectly applied patches. The context lines in the patches can be updated with devtool: devtool modify <recipe> devtool finish --force-patch-refresh <recipe> <layer_path> Then the updated patches and the source tree (in devtool's workspace) should be reviewed to make sure the patches apply in the correct place and don't introduce duplicate lines (which can, and does happen when some of the context is ignored). Further information: http://lists.openembedded.org/pipermail/openembedded-core/2018-March/148675.html https://bugzilla.yoctoproject.org/show_bug.cgi?id=10450 Details: Applying patch libnetfilter-cthelper-visibility-hidden.patch patching file doxygen.cfg.in patching file src/internal.h patching file src/libnetfilter_cthelper.c Hunk #2 succeeded at 118 with fuzz 2. Now at patch libnetfilter-cthelper-visibility-hidden.patch Signed-off-by: Armin Kuster <akuster808@gmail.com>
2018-04-06ebtables: Fix duplicate definition errors due to netinet/ether.hKhem Raj
Make the patch musl specific as it is regressing glibc 2.27 Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-04-06ebtables: enable KERNEL_64_USERSPACE_32 for armLi Zhou
On arm64 board, run the kernel as 64bit with 32bit userpace ebtables, then run ebtables command: ebtables -A OUTPUT -p arp -o eth3 -j DROP Below error occurs: kernel msg: ebtables bug: please report to author: Standard target size too big To solve this, enable KERNEL_64_USERSPACE_32 for arm as the commit <ebtables: enable KERNEL_64_USERSPACE_32 for powerpc> do. Use TARGET_ARCH to replace KARCH here because that KARCH can't always get value by default. Signed-off-by: Li Zhou <li.zhou@windriver.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2018-02-05ebtables: Remove bashismsJoshua Watt
Removes the bashism of prefacing shell functions with "function" and renames the clear function to not conflict with the command of the same name. Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-10-16libmnl: Move to oe-coreMark Hatle
Moved to oe-core, remove this version. Signed-off-by: Mark Hatle <mark.hatle@windriver.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-10-11ebtables: Add HOMEPAGE info into recipe file.Huang Qiyu
Signed-off-by: Huang Qiyu <huangqy.fnst@cn.fujitsu.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-09-08ebtables: replace ebtables-save perl script with bash rewriteAndre McCurdy
Fedora provides a bash replacement for the default ebtables-save perl script. Using it allows the ebtables run-time dependency on perl to be replaced with a runtime dependency on bash - which is lower overhead and more likely to be present on typical embedded systems already. https://bugzilla.redhat.com/show_bug.cgi?id=746040 http://pkgs.fedoraproject.org/cgit/rpms/ebtables.git/tree/ebtables-save Since ebtables-save no longer contains a references to /usr, the previous QA issue workaround of moving it from ${base_sbindir} to ${sbindir} is no longer required. http://git.openembedded.org/meta-openembedded/commit/?id=a7c6fcebee7d9f86c356ea92de445d89e714ff62 Signed-off-by: Andre McCurdy <armccurdy@gmail.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-08-31recipes: remove blacklisted recipesMartin Jansa
* as PNBLACKLIST message says, these recipes are blacklisted for long time and nobody showed any interest to fix them * remove all unused .patch and .inc files as well Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
2017-06-28nftables: backport a few ICMP & ICMPv6 fixesAndré Draszik
- assign network ctx for ICMP & ICMPv6 - additional ICMPv6 types - allow update of net base w. meta l4proto ipv6-icmp - l4 proto fixes The initial trigger was that ICMPv6 type 143 (mld2-listener-report) wasn't working as expected. Signed-off-by: André Draszik <adraszik@tycoint.com> Acked-by: Sylvain Lemieux <slemieux@tycoint.com> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-conntrack: Upgrade to 1.0.6Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25conntrack-tools: Upgrade to 1.4.4Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-acct: Fix build with clangKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-queue: Fix symbol visibility bug found with clangKhem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-cthelper, libnetfilter-cttimeout: Backport patches to fix ↵Khem Raj
symbol visibility These are needed for building it with clang Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25nftables: Upgrade to 0.7Khem Raj
Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnftnl: Upgrade to 1.0.7Khem Raj
Fix build with clang while here Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25nfacct: fixed SRC_URI and dropped workdir statementOliver Graute
Signed-off-by: Oliver Graute <oliver.graute@neuhaus.de> Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-queue: Update to git for SRC_URIKhem Raj
brings in the fixes to build on musl Add a typo fix patch Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
2017-04-25libnetfilter-log: Switch to git URIKhem Raj
Move to tip of tree which has needed fixes for musl build add missing dependency on libmnl Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>