Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 486836

Summary: net-firewall/ipset-6.20 - version bump
Product: Gentoo Linux Reporter: Olipro <olipro+gentoopub>
Component: Current packagesAssignee: Robin Johnson <robbat2>
Status: RESOLVED FIXED    
Severity: normal Keywords: PATCH
Priority: Normal    
Version: unspecified   
Hardware: All   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---
Attachments: ipset-6.20 ebuild (flagged as testing)
patch to fix configure failure when --with-kmod=no (i.e. USE flag modules unset)

Description Olipro 2013-10-03 00:58:03 UTC
bump the version and modify this line from:

for i in ip_set{,_bitmap_{ip{,mac},port},_hash_{ip{,port{,ip,net}},net,net{port,iface}},_list_set}; do

to:

for i in ip_set{,_bitmap_{ip{,mac},port},_hash_{ip{,port{,ip,net}},netportnet,net,net{port,iface,net}},_list_set}; do

In order to support the new ipset types (hash:net,net and hash:net,port,net)
Comment 1 Olipro 2013-10-03 14:26:07 UTC
I suppose this is also a viable (shorter) alternative:

for i in ip_set{,_bitmap_{ip{,mac},port},_hash_{ip{,port{,ip,net}},net{,port,iface,net,portnet}},_list_set}; do
Comment 2 Olipro 2013-10-11 16:14:18 UTC
Created attachment 360652 [details]
ipset-6.20 ebuild (flagged as testing)

This is an ebuild based on ipset-6.19, adds support for the new ipset modules and adds checking for CONFIG_NET_NS in the kernel which is now required.

Depends on a patch to fix a configure failure when building without kernel modules (attached to this post)
Comment 3 Olipro 2013-10-11 16:15:10 UTC
Created attachment 360654 [details, diff]
patch to fix configure failure when --with-kmod=no (i.e. USE flag modules unset)
Comment 4 Olipro 2013-10-28 14:20:46 UTC
ipset 6.20.1 has been released with the configure failure patch already applied.

The ebuild attached to this bug should thus be bumped to 6.20.1 and the epatch directive can of course be removed.
Comment 5 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2013-12-01 19:16:59 UTC
It does build here with no NET_NS in use, but bumped anyway.