[system-config-firewall] - only write ipv6-dhcp for ipv6 (rhbz#815555)
Thomas Woerner
twoerner at fedoraproject.org
Mon Apr 23 21:20:45 UTC 2012
commit f98252d0e48dced332e06b0c1ec03b0ffa011b2a
Author: Thomas Woerner <twoerner at redhat.com>
Date: Mon Apr 23 23:19:41 2012 +0200
- only write ipv6-dhcp for ipv6 (rhbz#815555)
system-config-firewall-1.2.29-ipv6-dhcp.patch | 7 ++++---
system-config-firewall.spec | 5 ++++-
2 files changed, 8 insertions(+), 4 deletions(-)
---
diff --git a/system-config-firewall-1.2.29-ipv6-dhcp.patch b/system-config-firewall-1.2.29-ipv6-dhcp.patch
index 4c7fb60..79a838b 100644
--- a/system-config-firewall-1.2.29-ipv6-dhcp.patch
+++ b/system-config-firewall-1.2.29-ipv6-dhcp.patch
@@ -1,12 +1,13 @@
diff -up system-config-firewall-1.2.29/src/fw_iptables.py.ipv6-dhcp system-config-firewall-1.2.29/src/fw_iptables.py
--- system-config-firewall-1.2.29/src/fw_iptables.py.ipv6-dhcp 2012-04-20 18:44:49.788614086 +0200
-+++ system-config-firewall-1.2.29/src/fw_iptables.py 2012-04-20 18:44:56.171630987 +0200
-@@ -368,6 +368,8 @@ class iptablesClass:
++++ system-config-firewall-1.2.29/src/fw_iptables.py 2012-04-23 23:14:31.745233715 +0200
+@@ -368,6 +368,9 @@ class iptablesClass:
self._icmp(conf, fd, "INPUT", reject_type)
# trust lo
fd.write("-A INPUT -i lo -j ACCEPT\n")
+ # Always allow ipv6-dhcp
-+ fd.write("-A INPUT -m state --state NEW -m udp -p udp --dport 546 -d fe80::/64 -j ACCEPT\n")
++ if self.type == "ipv6":
++ fd.write("-A INPUT -m state --state NEW -m udp -p udp --dport 546 -d fe80::/64 -j ACCEPT\n")
# trusted interfaces
if conf.trust:
for dev in conf.trust:
diff --git a/system-config-firewall.spec b/system-config-firewall.spec
index 0c25444..ab2741c 100644
--- a/system-config-firewall.spec
+++ b/system-config-firewall.spec
@@ -16,7 +16,7 @@
Summary: A graphical interface for basic firewall setup
Name: system-config-firewall
Version: 1.2.29
-Release: 6%{?dist}
+Release: 7%{?dist}
URL: http://fedorahosted.org/system-config-firewall
License: GPLv2+
ExclusiveOS: Linux
@@ -181,6 +181,9 @@ gtk-update-icon-cache %{_datadir}/icons/hicolor &>/dev/null || :
%{_datadir}/system-config-firewall/fw_tui.*
%changelog
+* Mon Apr 23 2012 Thomas Woerner <twoerner at redhat.com> 1.2.29-7
+- only write ipv6-dhcp for ipv6 (rhbz#815555)
+
* Fri Apr 20 2012 Thomas Woerner <twoerner at redhat.com> 1.2.29-6
- Always allow ipv6-dhcp
More information about the scm-commits
mailing list