current/SPECS/shorewall.spec

%define debug_package %{nil}

%define version_major 4.5
%define version_minor 10.1
%define version %{version_major}.%{version_minor}
%define version_main %{version}
%define version_lite %{version}
%define ipv6_ver %{version}
%define ipv6_lite_ver %{version}
%define sha1sums_ver %{version}
%define ftp_ver %{version_major}.10
%define ftp_path ftp://ftp.shorewall.net/pub/shorewall/%{version_major}/%{name}-%{ftp_ver}

%define name6 %{name}6

Summary:        Iptables-based firewall for Linux systems
Name:           shorewall
Version:        %{version}
Release:        %mkrel 3
License:        GPLv2+ and LGPLv2.1+
Group:          System/Servers
URL:            http://www.shorewall.net/
Source0:        %ftp_path/%{name}-%{version}.tar.bz2
Source1:        %ftp_path/%{name}-lite-%{version_lite}.tar.bz2
Source2:        %ftp_path/%{name}-docs-html-%{version}.tar.bz2
Source3:        %ftp_path/%{name6}-%{ipv6_ver}.tar.bz2
Source4:        %ftp_path/%{name6}-lite-%{ipv6_lite_ver}.tar.bz2
Source5:        %ftp_path/%{sha1sums_ver}.sha1sums
Source6:        %ftp_path/%{name}-core-%{version}.tar.bz2
Patch4:         %{name}-4.4.23-allow-netmask-0.patch
Requires:       iptables
Requires:       iproute2
Requires:       shorewall-core = %version-%release
Requires(post): rpm-helper
Requires(preun): rpm-helper
BuildConflicts: apt-common
BuildArch:      noarch

%description
The Shoreline Firewall, more commonly known as "Shorewall", is a Netfilter
(iptables) based firewall that can be used on a dedicated firewall system,
a multi-function gateway/ router/server or on a standalone GNU/Linux system.

%package core
Summary:        Shorewall core libraries
Group:          System/Servers
Conflicts:      shorewall < 4.5-3
Requires(post): rpm-helper
Requires(preun):        rpm-helper

%description core
An IPv6 enabled and capable Shoreline Firewall.


%package ipv6
Summary:        IPv6 capable Shorewall
Group:          System/Servers
Requires:       %{name} = %{version}-%{release}
Requires:       iptables-ipv6
Requires:       iproute2
Requires:       shorewall-core
Requires(post): rpm-helper
Requires(preun):        rpm-helper

%description ipv6
An IPv6 enabled and capable Shoreline Firewall.

%package ipv6-lite
Summary:        Lite version of ipv6 shorewall
Group:          System/Servers
Requires:       %{name}-ipv6 = %{version}-%{release}
Requires:       shorewall-core
Requires(post): rpm-helper
Requires(preun):        rpm-helper

%description ipv6-lite
Shorewall IPv6 Lite is a companion product to Shorewall IPv6 that allows 
network administrators to centralize the configuration of Shorewall-based
firewalls.

%package lite
Summary:        Lite version of shorewall
Group:          System/Servers
Requires:       %{name} = %{version}-%{release}
Requires:       shorewall-core
Requires(post): rpm-helper
Requires(preun):        rpm-helper

%description lite
Shorewall Lite is a companion product to Shorewall that allows network
administrators to centralize the configuration of Shorewall-based firewalls.

%package doc
Summary:        Firewall scripts
Group:          System/Servers

%description doc 
The Shoreline Firewall, more commonly known as "Shorewall", is a Netfilter
(iptables) based firewall that can be used on a dedicated firewall system,
a multi-function gateway/ router/server or on a standalone GNU/Linux system.

This package contains the docs.

%prep
%setup -q -c -n %{name}-%{version}
%setup -q -T -D -a 1
%setup -q -T -D -a 2
%setup -q -T -D -a 3
%setup -q -T -D -a 4
%setup -q -T -D -a 6

pushd %{name}-%{version_main}
%patch4 -p1 -b .allow-netmask-0
popd

%build
# (tpg) we do nothing here

%install
mkdir -p %{buildroot}%{_unitdir}

export PREFIX=%{buildroot}
export OWNER=`id -n -u`
export GROUP=`id -n -g`

export CONFDIR=%{_sysconfdir}/%{name}

pushd %{name}-core-%{version_main}
./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
DESTDIR=%{buildroot} ./install.sh shorewallrc.redhat
popd

pushd %{name}-%{version_main}
# (blino) enable startup (new setting as of 2.1.3)
perl -pi -e 's/STARTUP_ENABLED=.*/STARTUP_ENABLED=Yes/' configfiles/%{name}.conf

# Keep synced with net.ipv4.ip_forward var in /etc/sysctl.conf
perl -pi -e 's/IP_FORWARDING=.*/IP_FORWARDING=Keep/' configfiles/%{name}.conf

# blank Internal option  
perl -pi -e 's/TC_ENABLED=Internal/TC_ENABLED=/' configfiles/%{name}.conf

# (tpg) do the optimizations
perl -pi -e 's/OPTIMIZE=.*/OPTIMIZE=1/' configfiles/%{name}.conf

# (tpg) set config path
perl -pi -e 's#CONFIG_PATH=.*#CONFIG_PATH=configfiles/%{/g_sysconfdir}/%{name}#' configpath

# (lmenut) mga kernel modules are compressed by default (mga #1147)
perl -pi -e 's#MODULE_SUFFIX=.*#MODULE_SUFFIX="ko ko.xz ko.gz"#' configfiles/%{name}.conf

# (alien) have accounting by default in the mangle table
perl -pi -e 's#ACCOUNTING_TABLE=.*#ACCOUNTING_TABLE=mangle#' configfiles/%{name}.conf

./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}

# let's do the install
DESTDIR=%{buildroot} ./install.sh shorewallrc.redhat
install -m 644 *.service %{buildroot}%{_unitdir}
popd

#(tpg) IPv6
pushd %{name6}-%{ipv6_ver}
# (blino) enable startup (new setting as of 2.1.3)
perl -pi -e 's/STARTUP_ENABLED=.*/STARTUP_ENABLED=Yes/' configfiles/%{name6}.conf
# Keep synced with net.ipv4.ip_forward var in /etc/sysctl.conf
perl -pi -e 's/IP_FORWARDING=.*/IP_FORWARDING=Keep/' configfiles/%{name6}.conf
# (lmenut) mga kernel modules are compressed by default (mga #1147)
perl -pi -e 's#MODULE_SUFFIX=.*#MODULE_SUFFIX="ko ko.xz ko.gz"#' configfiles/%{name6}.conf
./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
DESTDIR=%{buildroot} ./install.sh
install -m 644 *.service %{buildroot}%{_unitdir}
popd

pushd %{name6}-lite-%{ipv6_lite_ver}
./configure.pl  SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
DESTDIR=%{buildroot} ./install.sh
install -m 644 *.service %{buildroot}%{_unitdir}
popd

pushd %{name}-lite-%{version_lite}
./configure.pl  SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
DESTDIR=%{buildroot} ./install.sh
install -m 644 *.service %{buildroot}%{_unitdir}
popd

# Suppress automatic replacement of "echo" by "gprintf" in the shorewall
# startup script by RPM. This automatic replacement is broken.
export DONT_GPRINTIFY=1

#(tpg) looks like these files are needed
touch %{buildroot}/%{_var}/lib/shorewall/{chains,nat,proxyarp,restarted,zones,restore-base,restore-tail,state,.modules,.modulesdir,.iptables-restore-input,.start,.restart,.restore}
touch %{buildroot}/%{_var}/lib/shorewall-lite/firewall

#(tpg) ipv6
touch %{buildroot}/%{_var}/lib/%{name6}/{chains,restarted,zones,restore-base,restore-tail,state,.modules,.modulesdir,.iptables-restore-input,.start,.restart,.restore}
touch %{buildroot}/%{_var}/lib/%{name6}-lite/firewall

#remove unused files because of %exclude misbehaviour
rm -f %{buildroot}%{_datadir}/%{name6}/configfiles/*
rm -f %{buildroot}%{_datadir}/shorewall/configfiles/*

# Remove sysv init files
rm -rf %{buildroot}%{_initrddir}

# Don't install systemd service in /lib/systemd
rm -f %{buildroot}/lib/systemd/system/shorewall.service

%post
if [ "$1" -ge 1 ] ; then
  perl -pi -e 's#MODULE_SUFFIX=ko$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name}/%{name}.conf
  perl -pi -e 's#MODULE_SUFFIX=\"ko ko.gz\"$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name}/%{name}.conf
fi
%_post_service shorewall

%create_ghostfile %{_var}/lib/%{name}/chains root root 644
%create_ghostfile %{_var}/lib/%{name}/nat root root 644
%create_ghostfile %{_var}/lib/%{name}/proxyarp root root 644
%create_ghostfile %{_var}/lib/%{name}/restarted root root 644
%create_ghostfile %{_var}/lib/%{name}/zones root root 644
%create_ghostfile %{_var}/lib/%{name}/restore-base root root 644
%create_ghostfile %{_var}/lib/%{name}/restore-tail root root 644
%create_ghostfile %{_var}/lib/%{name}/state root root 644
%create_ghostfile %{_var}/lib/%{name}/.modules root root 644
%create_ghostfile %{_var}/lib/%{name}/.modulesdir root root 644
%create_ghostfile %{_var}/lib/%{name}/.iptables-restore-input root root 644
%create_ghostfile %{_var}/lib/%{name}/.restart root root 700
%create_ghostfile %{_var}/lib/%{name}/.restore root root 700
%create_ghostfile %{_var}/lib/%{name}/.start root root 700

%preun
%_preun_service %{name}
if [ $1 = 0 ] ; then
  rm -f %{_sysconfdir}/%{name}/startup_disabled
  rm -f %{_var}/lib/%{name}/*
fi

%post lite
%_post_service %{name}-lite
%create_ghostfile %{_var}/lib/%{name}-lite/firewall root root 644

%preun lite
%_preun_service %{name}-lite

%post ipv6
if [ $1 > 1 ] ; then
  perl -pi -e 's#MODULE_SUFFIX=ko$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name6}/%{name6}.conf
  perl -pi -e 's#MODULE_SUFFIX=\"ko ko.gz\"$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name6}/%{name6}.conf
fi
%_post_service %{name6}

%create_ghostfile %{_var}/lib/%{name6}/chains root root 644
%create_ghostfile %{_var}/lib/%{name6}/restarted root root 644
%create_ghostfile %{_var}/lib/%{name6}/zones root root 644
%create_ghostfile %{_var}/lib/%{name6}/restore-base root root 644
%create_ghostfile %{_var}/lib/%{name6}/restore-tail root root 644
%create_ghostfile %{_var}/lib/%{name6}/state root root 644
%create_ghostfile %{_var}/lib/%{name6}/.modules root root 644
%create_ghostfile %{_var}/lib/%{name6}/.modulesdir root root 644
%create_ghostfile %{_var}/lib/%{name6}/.iptables-restore-input root root 644
%create_ghostfile %{_var}/lib/%{name6}/.restart root root 700
%create_ghostfile %{_var}/lib/%{name6}/.restore root root 700
%create_ghostfile %{_var}/lib/%{name6}/.start root root 700

%preun ipv6
%_preun_service %{name6}
if [ $1 = 0 ] ; then
  rm -f %{_sysconfdir}/%{name6}/startup_disabled
  rm -f %{_var}/lib/%{name6}/*
fi

%post ipv6-lite
%_post_service %{name6}-lite
%create_ghostfile %{_var}/lib/%{name6}-lite/firewall root root 644

%preun ipv6-lite
%_preun_service %{name6}-lite

%files
%doc %{name}-%{version_main}/{changelog.txt,releasenotes.txt,Samples}
%config(noreplace) %{_sysconfdir}/sysconfig/%{name}
%dir %{_datadir}/%{name}
%dir %attr(755,root,root) %{_var}/lib/%{name}
%ghost %{_var}/lib/%{name}/*
%ghost %{_var}/lib/%{name}/.??*
%config %{_sysconfdir}/logrotate.d/%{name}
%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/%{name}
#%attr(755,root,root) %{_sbindir}/%{name}
%attr(755,root,root) /sbin/%{name}
%{_datadir}/%{name}/action*
%{_datadir}/%{name}/configpath
%{_datadir}/%{name}/helpers
%{_datadir}/%{name}/lib.cli-std
%{_datadir}/%{name}/lib.core
%{_datadir}/%{name}/macro.*
%{_datadir}/%{name}/modules*
%{_datadir}/%{name}/version
%{_libexecdir}/%{name}/getparams
%{_libexecdir}/%{name}/wait4ifup
%{_mandir}/man5/%{name}-accounting.5.*
%{_mandir}/man5/%{name}-actions.5.*
%{_mandir}/man5/%{name}-blacklist.5.*
%{_mandir}/man5/%{name}-ecn.5.*
%{_mandir}/man5/%{name}-exclusion.5.*
%{_mandir}/man5/%{name}-hosts.5.*
%{_mandir}/man5/%{name}-interfaces.5.*
%{_mandir}/man5/%{name}-ipsets.5.*
%{_mandir}/man5/%{name}-maclist.5.*
%{_mandir}/man5/%{name}-masq.5.*
%{_mandir}/man5/%{name}-modules.5.*
%{_mandir}/man5/%{name}-nat.5.*
%{_mandir}/man5/%{name}-nesting.5.*
#%{_mandir}/man5/%{name}-notrack.5.*
%{_mandir}/man5/%{name}-netmap.5.*
%{_mandir}/man5/%{name}-params.5.*
%{_mandir}/man5/%{name}-policy.5.*
%{_mandir}/man5/%{name}-providers.5.*
%{_mandir}/man5/%{name}-proxyarp.5.*
#%{_mandir}/man5/%{name}-route_rules.5.*
%{_mandir}/man5/%{name}-routes.5.*
%{_mandir}/man5/%{name}-routestopped.5.*
%{_mandir}/man5/%{name}-rules.5.*
%{_mandir}/man5/%{name}-secmarks.5.*
%{_mandir}/man5/%{name}-tcclasses.5.*
%{_mandir}/man5/%{name}-tcinterfaces.5.*
%{_mandir}/man5/%{name}-tcpri.5.*
%{_mandir}/man5/%{name}-tcdevices.5.*
%{_mandir}/man5/%{name}-tcfilters.5.*
%{_mandir}/man5/%{name}-tcrules.5.*
%{_mandir}/man5/%{name}-tos.5.*
%{_mandir}/man5/%{name}-tunnels.5.*
%{_mandir}/man5/%{name}-vardir.5.*
%{_mandir}/man5/%{name}-zones.5.*
%{_mandir}/man5/%{name}.conf.5.*
%{_mandir}/man8/%{name}.8.*
%{_mandir}/man8/%{name}-init.8.*
%{_mandir}/man5/%{name}-blrules.5.*
%{_mandir}/man5/%{name}-conntrack.5.*
%{_mandir}/man5/%{name}-rtrules.5.*
%{_mandir}/man5/%{name}-stoppedrules.5.*
#%dir %{_datadir}/shorewall/Shorewall
%{_datadir}/perl5/vendor_perl/Shorewall/*.pm
%{_libexecdir}/shorewall/compiler.pl
%{_datadir}/shorewall/prog.footer
#%{_datadir}/shorewall/prog.header
%{_unitdir}/shorewall.service

%files ipv6
%doc %{name6}-%{ipv6_ver}/{changelog.txt,releasenotes.txt,tunnel,ipsecvpn,Samples6}
%config(noreplace) %{_sysconfdir}/sysconfig/%{name6}
%dir %{_sysconfdir}/%{name6}
%dir %{_datadir}/%{name6}
%dir %attr(755,root,root) %{_var}/lib/%{name6}
%ghost %{_var}/lib/%{name6}/*
%ghost %{_var}/lib/%{name6}/.??*
%config(noreplace) %{_sysconfdir}/%{name6}/*
%config %{_sysconfdir}/logrotate.d/%{name6}
%attr(755,root,root) %{_sbindir}/%{name6}
%{_datadir}/%{name6}/action*
#%{_datadir}/%{name}/prog.footer6
#%{_datadir}/%{name}/prog.header6
%{_datadir}/%{name6}/configpath
%{_datadir}/%{name6}/functions
%{_datadir}/%{name6}/helpers
%{_datadir}/%{name6}/lib.*
%{_datadir}/%{name6}/macro.*
%{_datadir}/%{name6}/modules*
%{_datadir}/%{name6}/version
#%{_libexecdir}/%{name6}/wait4ifup
%{_mandir}/man5/%{name6}-accounting.5.*
%{_mandir}/man5/%{name6}-actions.5.*
%{_mandir}/man5/%{name6}-blacklist.5.*
%{_mandir}/man5/%{name6}-exclusion.5.*
%{_mandir}/man5/%{name6}-hosts.5.*
%{_mandir}/man5/%{name6}-interfaces.5.*
%{_mandir}/man5/%{name6}-ipsets.5.*
%{_mandir}/man5/%{name6}-maclist.5.*
%{_mandir}/man5/%{name6}-modules.5.*
%{_mandir}/man5/%{name6}-nesting.5.*
#%{_mandir}/man5/%{name6}-notrack.5.*
%{_mandir}/man5/%{name6}-params.5.*
%{_mandir}/man5/%{name6}-policy.5.*
%{_mandir}/man5/%{name6}-providers.5.*
%{_mandir}/man5/%{name6}-proxyndp.5.*
#%{_mandir}/man5/%{name6}-route_rules.5.*
%{_mandir}/man5/%{name6}-routes.5.*
%{_mandir}/man5/%{name6}-routestopped.5.*
%{_mandir}/man5/%{name6}-rules.5.*
%{_mandir}/man5/%{name6}-secmarks.5.*
%{_mandir}/man5/%{name6}-tcclasses.5.*
%{_mandir}/man5/%{name6}-tcdevices.5.*
%{_mandir}/man5/%{name6}-tcfilters.5.*
%{_mandir}/man5/%{name6}-tcinterfaces.5.*
%{_mandir}/man5/%{name6}-tcpri.5.*
%{_mandir}/man5/%{name6}-tcrules.5.*
%{_mandir}/man5/%{name6}-tos.5.*
%{_mandir}/man5/%{name6}-tunnels.5.*
%{_mandir}/man5/%{name6}-vardir.5.*
%{_mandir}/man5/%{name6}-zones.5.*
%{_mandir}/man5/%{name6}.conf.5.*
%{_mandir}/man8/%{name6}.8.*
%{_mandir}/man5/%{name6}-blrules.5.*
%{_mandir}/man5/%{name6}-conntrack.5.*
%{_mandir}/man5/%{name6}-rtrules.5.*
%{_mandir}/man5/%{name6}-stoppedrules.5.*
%{_mandir}/man5/%{name6}-netmap.5.*
%{_unitdir}/shorewall6.service

%files lite
%doc %{name}-lite-%{version_lite}/*.txt
%config(noreplace) %{_sysconfdir}/sysconfig/%{name}-lite
%dir %{_datadir}/%{name}-lite
%dir %attr(755,root,root) %{_var}/lib/%{name}-lite
%ghost %{_var}/lib/%{name}-lite/*
%config(noreplace) %{_sysconfdir}/%{name}-lite/*
%config %{_sysconfdir}/logrotate.d/%{name}-lite
%attr(755,root,root) %{_sbindir}/%{name}-lite
%{_datadir}/%{name}-lite/configpath
%{_datadir}/%{name}-lite/functions
%{_datadir}/%{name}-lite/helpers
%{_datadir}/%{name}-lite/lib.*
%{_datadir}/%{name}-lite/modules*
%{_datadir}/%{name}-lite/version
%{_mandir}/man5/%{name}-lite*
%{_mandir}/man8/%{name}-lite*
%{_libexecdir}/%{name}-lite/shorecap
#%{_libexecdir}/%{name}-lite/wait4ifup
%{_unitdir}/shorewall-lite.service

%files ipv6-lite
%doc %{name6}-lite-%{ipv6_lite_ver}/*.txt
%config(noreplace) %{_sysconfdir}/sysconfig/%{name6}-lite
%dir %{_datadir}/%{name6}-lite
%dir %attr(755,root,root) %{_var}/lib/%{name6}-lite
%ghost %{_var}/lib/%{name6}-lite/*
%config(noreplace) %{_sysconfdir}/%{name6}-lite/*
%config %{_sysconfdir}/logrotate.d/%{name6}-lite
%attr(755,root,root) %{_sbindir}/%{name6}-lite
%{_datadir}/%{name6}-lite/configpath
%{_datadir}/%{name6}-lite/functions
%{_datadir}/%{name6}-lite/helpers
%{_datadir}/%{name6}-lite/lib.*
%{_datadir}/%{name6}-lite/modules*
%{_libexecdir}/%{name6}-lite/shorecap
%{_datadir}/%{name6}-lite/version
#%{_datadir}/%{name6}-lite/wait4ifup
%{_mandir}/man5/%{name6}-lite*
%{_mandir}/man8/%{name6}-lite*
%{_unitdir}/shorewall6-lite.service

%files doc
%doc %{name}-docs-html-%{version}/*

%files core
%doc shorewall-core-%{version}/{COPYING,changelog.txt,releasenotes.txt}
%dir %{_datadir}/shorewall/
%{_datadir}/shorewall/coreversion
%{_datadir}/shorewall/functions
%{_datadir}/shorewall/lib.base
%{_datadir}/shorewall/lib.cli
%{_datadir}/shorewall/lib.common
%{_datadir}/shorewall/shorewallrc
#%dir %{_libexecdir}/shorewall
#%{_libexecdir}/shorewall/wait4ifup
1	ennael	50066	%define debug_package %{nil}
2
3	kamil	333436	%define version_major 4.5
4			%define version_minor 10.1
5	ennael	50066	%define version %{version_major}.%{version_minor}
6			%define version_main %{version}
7			%define version_lite %{version}
8			%define ipv6_ver %{version}
9			%define ipv6_lite_ver %{version}
10	kamil	333436	%define sha1sums_ver %{version}
11			%define ftp_ver %{version_major}.10
12			%define ftp_path ftp://ftp.shorewall.net/pub/shorewall/%{version_major}/%{name}-%{ftp_ver}
13	ennael	50066
14			%define name6 %{name}6
15
16			Summary: Iptables-based firewall for Linux systems
17			Name: shorewall
18			Version: %{version}
19	anssi	394246	Release: %mkrel 3
20	kamil	222372	License: GPLv2+ and LGPLv2.1+
21	ennael	50066	Group: System/Servers
22			URL: http://www.shorewall.net/
23	kamil	333436	Source0: %ftp_path/%{name}-%{version}.tar.bz2
24	ennael	50066	Source1: %ftp_path/%{name}-lite-%{version_lite}.tar.bz2
25			Source2: %ftp_path/%{name}-docs-html-%{version}.tar.bz2
26			Source3: %ftp_path/%{name6}-%{ipv6_ver}.tar.bz2
27			Source4: %ftp_path/%{name6}-lite-%{ipv6_lite_ver}.tar.bz2
28			Source5: %ftp_path/%{sha1sums_ver}.sha1sums
29	kamil	333526	Source6: %ftp_path/%{name}-core-%{version}.tar.bz2
30	alien	229827	Patch4: %{name}-4.4.23-allow-netmask-0.patch
31	kamil	333449	Requires: iptables
32	ennael	50066	Requires: iproute2
33	anssi	394246	Requires: shorewall-core = %version-%release
34	ennael	50066	Requires(post): rpm-helper
35	ahmad	105489	Requires(preun): rpm-helper
36	ennael	50066	BuildConflicts: apt-common
37			BuildArch: noarch
38
39			%description
40			The Shoreline Firewall, more commonly known as "Shorewall", is a Netfilter
41			(iptables) based firewall that can be used on a dedicated firewall system,
42			a multi-function gateway/ router/server or on a standalone GNU/Linux system.
43
44	kamil	333526	%package core
45	kamil	333529	Summary: Shorewall core libraries
46	kamil	333526	Group: System/Servers
47	anssi	394246	Conflicts: shorewall < 4.5-3
48	kamil	333526	Requires(post): rpm-helper
49			Requires(preun): rpm-helper
50
51			%description core
52			An IPv6 enabled and capable Shoreline Firewall.
53
54
55	ennael	50066	%package ipv6
56			Summary: IPv6 capable Shorewall
57			Group: System/Servers
58			Requires: %{name} = %{version}-%{release}
59			Requires: iptables-ipv6
60			Requires: iproute2
61	kamil	333538	Requires: shorewall-core
62	ennael	50066	Requires(post): rpm-helper
63			Requires(preun): rpm-helper
64
65			%description ipv6
66			An IPv6 enabled and capable Shoreline Firewall.
67
68			%package ipv6-lite
69			Summary: Lite version of ipv6 shorewall
70			Group: System/Servers
71			Requires: %{name}-ipv6 = %{version}-%{release}
72	kamil	333538	Requires: shorewall-core
73	ennael	50066	Requires(post): rpm-helper
74			Requires(preun): rpm-helper
75
76			%description ipv6-lite
77			Shorewall IPv6 Lite is a companion product to Shorewall IPv6 that allows
78			network administrators to centralize the configuration of Shorewall-based
79			firewalls.
80
81			%package lite
82			Summary: Lite version of shorewall
83			Group: System/Servers
84			Requires: %{name} = %{version}-%{release}
85	kamil	333538	Requires: shorewall-core
86	ennael	50066	Requires(post): rpm-helper
87			Requires(preun): rpm-helper
88
89			%description lite
90			Shorewall Lite is a companion product to Shorewall that allows network
91			administrators to centralize the configuration of Shorewall-based firewalls.
92
93			%package doc
94			Summary: Firewall scripts
95			Group: System/Servers
96
97			%description doc
98			The Shoreline Firewall, more commonly known as "Shorewall", is a Netfilter
99			(iptables) based firewall that can be used on a dedicated firewall system,
100			a multi-function gateway/ router/server or on a standalone GNU/Linux system.
101
102			This package contains the docs.
103
104			%prep
105			%setup -q -c -n %{name}-%{version}
106			%setup -q -T -D -a 1
107			%setup -q -T -D -a 2
108			%setup -q -T -D -a 3
109			%setup -q -T -D -a 4
110	kamil	333526	%setup -q -T -D -a 6
111	ennael	50066
112			pushd %{name}-%{version_main}
113	alien	229827	%patch4 -p1 -b .allow-netmask-0
114	ennael	50066	popd
115
116			%build
117			# (tpg) we do nothing here
118
119			%install
120	kamil	333531	mkdir -p %{buildroot}%{_unitdir}
121
122	ennael	50066	export PREFIX=%{buildroot}
123			export OWNER=`id -n -u`
124			export GROUP=`id -n -g`
125
126			export CONFDIR=%{_sysconfdir}/%{name}
127
128	kamil	333527	pushd %{name}-core-%{version_main}
129	kamil	333532	./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
130	kamil	333527	DESTDIR=%{buildroot} ./install.sh shorewallrc.redhat
131			popd
132
133			pushd %{name}-%{version_main}
134	kamil	333524	# (blino) enable startup (new setting as of 2.1.3)
135			perl -pi -e 's/STARTUP_ENABLED=.*/STARTUP_ENABLED=Yes/' configfiles/%{name}.conf
136
137			# Keep synced with net.ipv4.ip_forward var in /etc/sysctl.conf
138			perl -pi -e 's/IP_FORWARDING=.*/IP_FORWARDING=Keep/' configfiles/%{name}.conf
139
140			# blank Internal option
141			perl -pi -e 's/TC_ENABLED=Internal/TC_ENABLED=/' configfiles/%{name}.conf
142
143			# (tpg) do the optimizations
144			perl -pi -e 's/OPTIMIZE=.*/OPTIMIZE=1/' configfiles/%{name}.conf
145
146	ennael	50066	# (tpg) set config path
147			perl -pi -e 's#CONFIG_PATH=.*#CONFIG_PATH=configfiles/%{/g_sysconfdir}/%{name}#' configpath
148
149	lmenut	189975	# (lmenut) mga kernel modules are compressed by default (mga #1147)
150	lmenut	209011	perl -pi -e 's#MODULE_SUFFIX=.*#MODULE_SUFFIX="ko ko.xz ko.gz"#' configfiles/%{name}.conf
151	lmenut	189975
152	alien	229729	# (alien) have accounting by default in the mangle table
153	kamil	333484	perl -pi -e 's#ACCOUNTING_TABLE=.*#ACCOUNTING_TABLE=mangle#' configfiles/%{name}.conf
154	alien	229729
155	kamil	333532	./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
156	kamil	333523
157	ennael	50066	# let's do the install
158	kamil	333527	DESTDIR=%{buildroot} ./install.sh shorewallrc.redhat
159	kamil	333531	install -m 644 *.service %{buildroot}%{_unitdir}
160	ennael	50066	popd
161
162			#(tpg) IPv6
163			pushd %{name6}-%{ipv6_ver}
164			# (blino) enable startup (new setting as of 2.1.3)
165	lmenut	189975	perl -pi -e 's/STARTUP_ENABLED=.*/STARTUP_ENABLED=Yes/' configfiles/%{name6}.conf
166	ennael	50066	# Keep synced with net.ipv4.ip_forward var in /etc/sysctl.conf
167	lmenut	189975	perl -pi -e 's/IP_FORWARDING=.*/IP_FORWARDING=Keep/' configfiles/%{name6}.conf
168			# (lmenut) mga kernel modules are compressed by default (mga #1147)
169	lmenut	209011	perl -pi -e 's#MODULE_SUFFIX=.*#MODULE_SUFFIX="ko ko.xz ko.gz"#' configfiles/%{name6}.conf
170	kamil	333537	./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
171	kamil	333527	DESTDIR=%{buildroot} ./install.sh
172	kamil	333531	install -m 644 *.service %{buildroot}%{_unitdir}
173	ennael	50066	popd
174
175			pushd %{name6}-lite-%{ipv6_lite_ver}
176	kamil	333532	./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
177	kamil	333527	DESTDIR=%{buildroot} ./install.sh
178	kamil	333531	install -m 644 *.service %{buildroot}%{_unitdir}
179	ennael	50066	popd
180
181			pushd %{name}-lite-%{version_lite}
182	kamil	333532	./configure.pl SYSTEMD=%{_unitdir} SBINDIR=%{_sbindir} LIBEXEC=%{_libexecdir}
183	kamil	333527	DESTDIR=%{buildroot} ./install.sh
184	kamil	333531	install -m 644 *.service %{buildroot}%{_unitdir}
185	ennael	50066	popd
186
187			# Suppress automatic replacement of "echo" by "gprintf" in the shorewall
188			# startup script by RPM. This automatic replacement is broken.
189			export DONT_GPRINTIFY=1
190
191			#(tpg) looks like these files are needed
192			touch %{buildroot}/%{_var}/lib/shorewall/{chains,nat,proxyarp,restarted,zones,restore-base,restore-tail,state,.modules,.modulesdir,.iptables-restore-input,.start,.restart,.restore}
193			touch %{buildroot}/%{_var}/lib/shorewall-lite/firewall
194
195			#(tpg) ipv6
196			touch %{buildroot}/%{_var}/lib/%{name6}/{chains,restarted,zones,restore-base,restore-tail,state,.modules,.modulesdir,.iptables-restore-input,.start,.restart,.restore}
197			touch %{buildroot}/%{_var}/lib/%{name6}-lite/firewall
198
199	ennael	50105	#remove unused files because of %exclude misbehaviour
200			rm -f %{buildroot}%{_datadir}/%{name6}/configfiles/*
201			rm -f %{buildroot}%{_datadir}/shorewall/configfiles/*
202
203	kamil	333531	# Remove sysv init files
204			rm -rf %{buildroot}%{_initrddir}
205
206	solbu	343300	# Don't install systemd service in /lib/systemd
207			rm -f %{buildroot}/lib/systemd/system/shorewall.service
208
209	ennael	50066	%post
210	blino	225082	if [ "$1" -ge 1 ] ; then
211	lmenut	209011	perl -pi -e 's#MODULE_SUFFIX=ko$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name}/%{name}.conf
212			perl -pi -e 's#MODULE_SUFFIX=\"ko ko.gz\"$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name}/%{name}.conf
213	lmenut	193495	fi
214	ennael	50066	%_post_service shorewall
215
216			%create_ghostfile %{_var}/lib/%{name}/chains root root 644
217			%create_ghostfile %{_var}/lib/%{name}/nat root root 644
218			%create_ghostfile %{_var}/lib/%{name}/proxyarp root root 644
219			%create_ghostfile %{_var}/lib/%{name}/restarted root root 644
220			%create_ghostfile %{_var}/lib/%{name}/zones root root 644
221			%create_ghostfile %{_var}/lib/%{name}/restore-base root root 644
222			%create_ghostfile %{_var}/lib/%{name}/restore-tail root root 644
223			%create_ghostfile %{_var}/lib/%{name}/state root root 644
224			%create_ghostfile %{_var}/lib/%{name}/.modules root root 644
225			%create_ghostfile %{_var}/lib/%{name}/.modulesdir root root 644
226			%create_ghostfile %{_var}/lib/%{name}/.iptables-restore-input root root 644
227			%create_ghostfile %{_var}/lib/%{name}/.restart root root 700
228			%create_ghostfile %{_var}/lib/%{name}/.restore root root 700
229			%create_ghostfile %{_var}/lib/%{name}/.start root root 700
230
231			%preun
232			%_preun_service %{name}
233			if [ $1 = 0 ] ; then
234	kamil	222372	rm -f %{_sysconfdir}/%{name}/startup_disabled
235			rm -f %{_var}/lib/%{name}/*
236	ennael	50066	fi
237
238			%post lite
239			%_post_service %{name}-lite
240			%create_ghostfile %{_var}/lib/%{name}-lite/firewall root root 644
241
242			%preun lite
243			%_preun_service %{name}-lite
244
245			%post ipv6
246	lmenut	193495	if [ $1 > 1 ] ; then
247	lmenut	209012	perl -pi -e 's#MODULE_SUFFIX=ko$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name6}/%{name6}.conf
248			perl -pi -e 's#MODULE_SUFFIX=\"ko ko.gz\"$#MODULE_SUFFIX="ko ko.xz ko.gz"#' %{_sysconfdir}/%{name6}/%{name6}.conf
249	lmenut	193495	fi
250	ennael	50066	%_post_service %{name6}
251
252			%create_ghostfile %{_var}/lib/%{name6}/chains root root 644
253			%create_ghostfile %{_var}/lib/%{name6}/restarted root root 644
254			%create_ghostfile %{_var}/lib/%{name6}/zones root root 644
255			%create_ghostfile %{_var}/lib/%{name6}/restore-base root root 644
256			%create_ghostfile %{_var}/lib/%{name6}/restore-tail root root 644
257			%create_ghostfile %{_var}/lib/%{name6}/state root root 644
258			%create_ghostfile %{_var}/lib/%{name6}/.modules root root 644
259			%create_ghostfile %{_var}/lib/%{name6}/.modulesdir root root 644
260			%create_ghostfile %{_var}/lib/%{name6}/.iptables-restore-input root root 644
261			%create_ghostfile %{_var}/lib/%{name6}/.restart root root 700
262			%create_ghostfile %{_var}/lib/%{name6}/.restore root root 700
263			%create_ghostfile %{_var}/lib/%{name6}/.start root root 700
264
265			%preun ipv6
266			%_preun_service %{name6}
267			if [ $1 = 0 ] ; then
268	kamil	222372	rm -f %{_sysconfdir}/%{name6}/startup_disabled
269			rm -f %{_var}/lib/%{name6}/*
270	ennael	50066	fi
271
272			%post ipv6-lite
273			%_post_service %{name6}-lite
274			%create_ghostfile %{_var}/lib/%{name6}-lite/firewall root root 644
275
276			%preun ipv6-lite
277			%_preun_service %{name6}-lite
278
279			%files
280	kamil	333442	%doc %{name}-%{version_main}/{changelog.txt,releasenotes.txt,Samples}
281	kamil	333537	%config(noreplace) %{_sysconfdir}/sysconfig/%{name}
282	ennael	50066	%dir %{_datadir}/%{name}
283			%dir %attr(755,root,root) %{_var}/lib/%{name}
284			%ghost %{_var}/lib/%{name}/*
285			%ghost %{_var}/lib/%{name}/.??*
286			%config %{_sysconfdir}/logrotate.d/%{name}
287	kamil	333527	%attr(0600,root,root) %config(noreplace) %{_sysconfdir}/%{name}
288	kamil	333531	#%attr(755,root,root) %{_sbindir}/%{name}
289	ennael	50066	%attr(755,root,root) /sbin/%{name}
290			%{_datadir}/%{name}/action*
291			%{_datadir}/%{name}/configpath
292			%{_datadir}/%{name}/helpers
293	anssi	394246	%{_datadir}/%{name}/lib.cli-std
294			%{_datadir}/%{name}/lib.core
295	ennael	50066	%{_datadir}/%{name}/macro.*
296	ahmad	90647	%{_datadir}/%{name}/modules*
297	ennael	50066	%{_datadir}/%{name}/version
298	solbu	343300	%{_libexecdir}/%{name}/getparams
299			%{_libexecdir}/%{name}/wait4ifup
300	ennael	50066	%{_mandir}/man5/%{name}-accounting.5.*
301			%{_mandir}/man5/%{name}-actions.5.*
302			%{_mandir}/man5/%{name}-blacklist.5.*
303			%{_mandir}/man5/%{name}-ecn.5.*
304			%{_mandir}/man5/%{name}-exclusion.5.*
305			%{_mandir}/man5/%{name}-hosts.5.*
306			%{_mandir}/man5/%{name}-interfaces.5.*
307	ahmad	90647	%{_mandir}/man5/%{name}-ipsets.5.*
308	ennael	50066	%{_mandir}/man5/%{name}-maclist.5.*
309			%{_mandir}/man5/%{name}-masq.5.*
310			%{_mandir}/man5/%{name}-modules.5.*
311			%{_mandir}/man5/%{name}-nat.5.*
312			%{_mandir}/man5/%{name}-nesting.5.*
313	kamil	333527	#%{_mandir}/man5/%{name}-notrack.5.*
314	ennael	50066	%{_mandir}/man5/%{name}-netmap.5.*
315			%{_mandir}/man5/%{name}-params.5.*
316			%{_mandir}/man5/%{name}-policy.5.*
317			%{_mandir}/man5/%{name}-providers.5.*
318			%{_mandir}/man5/%{name}-proxyarp.5.*
319	kamil	333527	#%{_mandir}/man5/%{name}-route_rules.5.*
320	ahmad	90647	%{_mandir}/man5/%{name}-routes.5.*
321	ennael	50066	%{_mandir}/man5/%{name}-routestopped.5.*
322			%{_mandir}/man5/%{name}-rules.5.*
323	ahmad	90647	%{_mandir}/man5/%{name}-secmarks.5.*
324	ennael	50066	%{_mandir}/man5/%{name}-tcclasses.5.*
325			%{_mandir}/man5/%{name}-tcinterfaces.5.*
326			%{_mandir}/man5/%{name}-tcpri.5.*
327			%{_mandir}/man5/%{name}-tcdevices.5.*
328			%{_mandir}/man5/%{name}-tcfilters.5.*
329			%{_mandir}/man5/%{name}-tcrules.5.*
330			%{_mandir}/man5/%{name}-tos.5.*
331			%{_mandir}/man5/%{name}-tunnels.5.*
332			%{_mandir}/man5/%{name}-vardir.5.*
333			%{_mandir}/man5/%{name}-zones.5.*
334			%{_mandir}/man5/%{name}.conf.5.*
335			%{_mandir}/man8/%{name}.8.*
336			%{_mandir}/man8/%{name}-init.8.*
337	kamil	333527	%{_mandir}/man5/%{name}-blrules.5.*
338			%{_mandir}/man5/%{name}-conntrack.5.*
339			%{_mandir}/man5/%{name}-rtrules.5.*
340			%{_mandir}/man5/%{name}-stoppedrules.5.*
341			#%dir %{_datadir}/shorewall/Shorewall
342			%{_datadir}/perl5/vendor_perl/Shorewall/*.pm
343	solbu	343300	%{_libexecdir}/shorewall/compiler.pl
344	ennael	50066	%{_datadir}/shorewall/prog.footer
345	kamil	333527	#%{_datadir}/shorewall/prog.header
346	kamil	333536	%{_unitdir}/shorewall.service
347	ennael	50066
348			%files ipv6
349			%doc %{name6}-%{ipv6_ver}/{changelog.txt,releasenotes.txt,tunnel,ipsecvpn,Samples6}
350	kamil	333537	%config(noreplace) %{_sysconfdir}/sysconfig/%{name6}
351	ennael	50066	%dir %{_sysconfdir}/%{name6}
352			%dir %{_datadir}/%{name6}
353			%dir %attr(755,root,root) %{_var}/lib/%{name6}
354			%ghost %{_var}/lib/%{name6}/*
355			%ghost %{_var}/lib/%{name6}/.??*
356			%config(noreplace) %{_sysconfdir}/%{name6}/*
357			%config %{_sysconfdir}/logrotate.d/%{name6}
358	kamil	333531	%attr(755,root,root) %{_sbindir}/%{name6}
359	ennael	50066	%{_datadir}/%{name6}/action*
360	kamil	333527	#%{_datadir}/%{name}/prog.footer6
361			#%{_datadir}/%{name}/prog.header6
362	ennael	50066	%{_datadir}/%{name6}/configpath
363			%{_datadir}/%{name6}/functions
364			%{_datadir}/%{name6}/helpers
365			%{_datadir}/%{name6}/lib.*
366			%{_datadir}/%{name6}/macro.*
367	ahmad	90647	%{_datadir}/%{name6}/modules*
368	ennael	50066	%{_datadir}/%{name6}/version
369	solbu	343300	#%{_libexecdir}/%{name6}/wait4ifup
370	ennael	50066	%{_mandir}/man5/%{name6}-accounting.5.*
371			%{_mandir}/man5/%{name6}-actions.5.*
372			%{_mandir}/man5/%{name6}-blacklist.5.*
373			%{_mandir}/man5/%{name6}-exclusion.5.*
374			%{_mandir}/man5/%{name6}-hosts.5.*
375			%{_mandir}/man5/%{name6}-interfaces.5.*
376	tv	142806	%{_mandir}/man5/%{name6}-ipsets.5.*
377	ennael	50066	%{_mandir}/man5/%{name6}-maclist.5.*
378			%{_mandir}/man5/%{name6}-modules.5.*
379			%{_mandir}/man5/%{name6}-nesting.5.*
380	kamil	333527	#%{_mandir}/man5/%{name6}-notrack.5.*
381	ennael	50066	%{_mandir}/man5/%{name6}-params.5.*
382			%{_mandir}/man5/%{name6}-policy.5.*
383			%{_mandir}/man5/%{name6}-providers.5.*
384	ahmad	90647	%{_mandir}/man5/%{name6}-proxyndp.5.*
385	kamil	333527	#%{_mandir}/man5/%{name6}-route_rules.5.*
386	ahmad	90647	%{_mandir}/man5/%{name6}-routes.5.*
387	ennael	50066	%{_mandir}/man5/%{name6}-routestopped.5.*
388			%{_mandir}/man5/%{name6}-rules.5.*
389	ahmad	90647	%{_mandir}/man5/%{name6}-secmarks.5.*
390	ennael	50066	%{_mandir}/man5/%{name6}-tcclasses.5.*
391			%{_mandir}/man5/%{name6}-tcdevices.5.*
392	ahmad	90647	%{_mandir}/man5/%{name6}-tcfilters.5.*
393	ennael	50066	%{_mandir}/man5/%{name6}-tcinterfaces.5.*
394			%{_mandir}/man5/%{name6}-tcpri.5.*
395			%{_mandir}/man5/%{name6}-tcrules.5.*
396			%{_mandir}/man5/%{name6}-tos.5.*
397			%{_mandir}/man5/%{name6}-tunnels.5.*
398			%{_mandir}/man5/%{name6}-vardir.5.*
399			%{_mandir}/man5/%{name6}-zones.5.*
400			%{_mandir}/man5/%{name6}.conf.5.*
401			%{_mandir}/man8/%{name6}.8.*
402	kamil	333527	%{_mandir}/man5/%{name6}-blrules.5.*
403			%{_mandir}/man5/%{name6}-conntrack.5.*
404			%{_mandir}/man5/%{name6}-rtrules.5.*
405			%{_mandir}/man5/%{name6}-stoppedrules.5.*
406			%{_mandir}/man5/%{name6}-netmap.5.*
407	kamil	333536	%{_unitdir}/shorewall6.service
408	ennael	50066
409			%files lite
410			%doc %{name}-lite-%{version_lite}/*.txt
411	kamil	333537	%config(noreplace) %{_sysconfdir}/sysconfig/%{name}-lite
412	ennael	50066	%dir %{_datadir}/%{name}-lite
413			%dir %attr(755,root,root) %{_var}/lib/%{name}-lite
414			%ghost %{_var}/lib/%{name}-lite/*
415			%config(noreplace) %{_sysconfdir}/%{name}-lite/*
416			%config %{_sysconfdir}/logrotate.d/%{name}-lite
417	kamil	333531	%attr(755,root,root) %{_sbindir}/%{name}-lite
418	ennael	50066	%{_datadir}/%{name}-lite/configpath
419			%{_datadir}/%{name}-lite/functions
420	ahmad	90647	%{_datadir}/%{name}-lite/helpers
421	ennael	50066	%{_datadir}/%{name}-lite/lib.*
422	ahmad	90647	%{_datadir}/%{name}-lite/modules*
423	ennael	50066	%{_datadir}/%{name}-lite/version
424			%{_mandir}/man5/%{name}-lite*
425			%{_mandir}/man8/%{name}-lite*
426	solbu	343300	%{_libexecdir}/%{name}-lite/shorecap
427			#%{_libexecdir}/%{name}-lite/wait4ifup
428	kamil	333536	%{_unitdir}/shorewall-lite.service
429	ennael	50066
430			%files ipv6-lite
431			%doc %{name6}-lite-%{ipv6_lite_ver}/*.txt
432	kamil	333537	%config(noreplace) %{_sysconfdir}/sysconfig/%{name6}-lite
433	ennael	50066	%dir %{_datadir}/%{name6}-lite
434			%dir %attr(755,root,root) %{_var}/lib/%{name6}-lite
435			%ghost %{_var}/lib/%{name6}-lite/*
436			%config(noreplace) %{_sysconfdir}/%{name6}-lite/*
437			%config %{_sysconfdir}/logrotate.d/%{name6}-lite
438	kamil	333531	%attr(755,root,root) %{_sbindir}/%{name6}-lite
439	ennael	50066	%{_datadir}/%{name6}-lite/configpath
440			%{_datadir}/%{name6}-lite/functions
441	ahmad	90647	%{_datadir}/%{name6}-lite/helpers
442	ennael	50066	%{_datadir}/%{name6}-lite/lib.*
443	ahmad	90647	%{_datadir}/%{name6}-lite/modules*
444	solbu	343300	%{_libexecdir}/%{name6}-lite/shorecap
445	ennael	50066	%{_datadir}/%{name6}-lite/version
446	kamil	333527	#%{_datadir}/%{name6}-lite/wait4ifup
447	ennael	50066	%{_mandir}/man5/%{name6}-lite*
448			%{_mandir}/man8/%{name6}-lite*
449	kamil	333536	%{_unitdir}/shorewall6-lite.service
450	ennael	50066
451			%files doc
452			%doc %{name}-docs-html-%{version}/*
453	kamil	333532
454			%files core
455			%doc shorewall-core-%{version}/{COPYING,changelog.txt,releasenotes.txt}
456			%dir %{_datadir}/shorewall/
457			%{_datadir}/shorewall/coreversion
458			%{_datadir}/shorewall/functions
459			%{_datadir}/shorewall/lib.base
460			%{_datadir}/shorewall/lib.cli
461			%{_datadir}/shorewall/lib.common
462			%{_datadir}/shorewall/shorewallrc
463			#%dir %{_libexecdir}/shorewall
464			#%{_libexecdir}/shorewall/wait4ifup