Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 335510 - net-firewall/ipsec-tools-0.7.3 output is not very helpful
Summary: net-firewall/ipsec-tools-0.7.3 output is not very helpful
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: Normal enhancement
Assignee: Anthony Basile
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2010-09-01 13:34 UTC by Hans de Graaff
Modified: 2012-03-04 18:20 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
Fixed ipsec-tools 0.7.3-r1 tunnel warnings ebuild (ipsec-tools-0.7.3-r1.ebuild,5.68 KB, text/plain)
2011-05-18 00:28 UTC, cbrochere
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Hans de Graaff gentoo-dev Security 2010-09-01 13:34:41 UTC
I've just tried to install ipsec-tools-0.7.3 and noticed the following output:

 *   IPv4 tunnels will not be available
 *   IPv4 tunnels will not be available
 *   IPv4 tunnels will not be available
 *   IPv6 tunnels will not be available
 *   IPv6 tunnels will not be available
 *   IPv6 tunnels will not be available
 *   IPv6 tunnels will not be available
 *   IPv6 tunnels will not be available
 *   IPv6 tunnels will not be available
 *   Unencrypted tunnels will not be available

This is not really helpful, it would be nice to show the actual missing kernel config options in the output.
Comment 1 cbrochere 2011-05-18 00:28:16 UTC
Created attachment 273737 [details]
Fixed ipsec-tools 0.7.3-r1 tunnel warnings ebuild
Comment 2 cbrochere 2011-05-18 00:31:19 UTC
In my attachment ebuild I've added the value that it's failing on and added a condition that if use-flag ipv6 is defined, then it will process checks for those kernel config options.
Comment 3 Anthony Basile gentoo-dev 2012-03-04 15:24:27 UTC
If USE=ipv6, the attached patch checks for

    INET6_IPCOMP INET6_AH INET6_ESP \
    INET6_XFRM_MODE_TRANSPORT \
    INET6_XFRM_MODE_TUNNEL \
    INET6_XFRM_MODE_BEET 

and 0.7.3-r1 and above in the tree check for those too.  So we're covered.  I think this bug should have been closed long ago.  Reopen it if you think I've missed something.
Comment 4 Anthony Basile gentoo-dev 2012-03-04 15:28:20 UTC
(In reply to comment #3)
> If USE=ipv6, the attached patch checks for
> 
>     INET6_IPCOMP INET6_AH INET6_ESP \
>     INET6_XFRM_MODE_TRANSPORT \
>     INET6_XFRM_MODE_TUNNEL \
>     INET6_XFRM_MODE_BEET 
> 
> and 0.7.3-r1 and above in the tree check for those too.  So we're covered. 
> I think this bug should have been closed long ago.  Reopen it if you think
> I've missed something.

Oh wait, I just realized that the point was the *detail* level of the warning message.  So 0.7.3-r1 gives details while 0.8.0 and 0.8.0-r1 doesn't.  I'll add that moving forward.
Comment 5 Anthony Basile gentoo-dev 2012-03-04 18:20:59 UTC
Okay, starting with ipsec-0.8.0-r1, the linux-info output is informative and easy to interpret.  In particular, I tired to emphasize a warning that the kernel config checked (/usr/src/linux) and the kernel config of the running kernel may be different and so beware!

Please reopen if you think more work needs to be done here.