blob: 64a0407290b713c07a9a78a18a9ce59eef03be1b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
# Copyright 1999-2020 Gentoo Authors
# Distributed under the terms of the GNU General Public License v2
EAPI=7
inherit autotools eutils linux-info readme.gentoo-r1 systemd
DESCRIPTION="Single Packet Authorization and Port Knocking application"
HOMEPAGE="https://www.cipherdyne.org/fwknop/"
SRC_URI="https://www.cipherdyne.org/fwknop/download/${P}.tar.gz"
LICENSE="GPL-2+"
SLOT="0"
KEYWORDS="~amd64 ~x86"
IUSE="+client extras firewalld gdbm gpg +iptables nfqueue +server static-libs udp-server"
DEPEND="
client? ( net-misc/wget[ssl] )
firewalld? ( net-firewall/firewalld )
gdbm? ( sys-libs/gdbm )
gpg? (
app-crypt/gpgme
dev-libs/libassuan
dev-libs/libgpg-error
)
iptables? ( net-firewall/iptables )
nfqueue? ( net-libs/libnetfilter_queue )
server? ( !nfqueue? ( !udp-server? ( net-libs/libpcap ) ) )
"
RDEPEND="${DEPEND}"
REQUIRED_USE="
nfqueue? ( server )
server? ( ^^ ( firewalld iptables ) )
udp-server? ( server )
"
PATCHES=( "${FILESDIR}/${PN}-2.6.10_fno-common_fix.patch" )
DOCS=( AUTHORS ChangeLog README )
DISABLE_AUTOFORMATTING=1
DOC_CONTENTS="
Example configuration files were installed to '${EPREFIX}/etc/fwknopd/'.
Please edit them to suit your needs and then remove the .example suffix.
fwknopd supports several backends: firewalld, iptables, ipfw, pf, ipf.
You can set the desired backend via FIREWALL_EXE option in fwknopd.conf
instead of the default one chosen at compile time.
"
pkg_setup() {
linux-info_pkg_setup
}
src_prepare() {
default_src_prepare
# Install example configs with .example suffix.
if use server; then
sed -i -e 's|conf;|conf.example;|g' Makefile.am || die
fi
eautoreconf
}
src_configure() {
local myeconfargs=(
--localstatedir="${EPREFIX}/run"
$(use_enable client)
$(use_enable !gdbm file-cache)
$(use_enable nfqueue nfq-capture)
$(use_enable server)
$(use_enable udp-server)
$(use_with gpg gpgme)
)
use firewalld && myeconfargs+=(--with-firewalld="${EPREFIX}/usr/sbin/firewalld")
use iptables && myeconfargs+=(--with-iptables="${EPREFIX}/sbin/iptables")
econf "${myeconfargs[@]}"
}
src_install() {
default_src_install
if use extras; then
dodoc extras/apparmor/usr.sbin.fwknopd
dodoc extras/console-qr/console-qr.sh
dodoc extras/fwknop-launcher/*
fi
if use server; then
newinitd "${FILESDIR}/fwknopd.init" fwknopd
newconfd "${FILESDIR}/fwknopd.confd" fwknopd
systemd_dounit "${FILESDIR}/fwknopd.service"
systemd_newtmpfilesd "${FILESDIR}/fwknopd.tmpfiles.conf" fwknopd.conf
readme.gentoo_create_doc
fi
find "${ED}" -type f -name "*.la" -delete || die
if ! use static-libs ; then
find "${ED}" -type f -name libfko.a -delete || die
fi
}
pkg_postinst() {
if use server; then
readme.gentoo_print_elog
if ! linux_config_exists || ! linux_chkconfig_present NETFILTER_XT_MATCH_COMMENT; then
echo
ewarn "fwknopd daemon relies on the 'comment' match in order to expire"
ewarn "created firewall rules, which is an important security feature."
ewarn "Please enable NETFILTER_XT_MATCH_COMMENT support in your kernel."
echo
fi
if use nfqueue && \
! linux_config_exists || ! linux_chkconfig_present NETFILTER_XT_TARGET_NFQUEUE; then
echo
ewarn "fwknopd daemon relies on the 'NFQUEUE' target for NFQUEUE mode."
ewarn "Please enable NETFILTER_XT_TARGET_NFQUEUE support in your kernel."
echo
fi
fi
}
|
GitWeb