Xtables-addons 2.6

build: explicitly support Linux 3.16, 3.17
xt_pknock: fix pknock in UDP SPA mode
2025-09-20 19:44:56 +02:00 · 2014-09-29 10:33:13 +02:00 · 2014-09-04 18:50:35 +02:00 · 2014-09-04 18:45:42 +02:00 · 2014-09-04 18:44:52 +02:00
5 changed files with 14 additions and 8 deletions
--- a/configure.ac
+++ b/configure.ac
@@ -1,4 +1,4 @@
-AC_INIT([xtables-addons], [2.5])
+AC_INIT([xtables-addons], [2.6])
 AC_CONFIG_AUX_DIR([build-aux])
 AC_CONFIG_HEADERS([config.h])
 AC_CONFIG_MACRO_DIR([m4])
@@ -63,7 +63,7 @@ if test -n "$kbuilddir"; then
 		echo "WARNING: Version detection did not succeed. Continue at own luck.";
 	else
 		echo "$kmajor.$kminor.$kmicro.$kstable in $kbuilddir";
-		if test "$kmajor" -gt 3 -o "$kmajor" -eq 3 -a "$kminor" -gt 15; then
+		if test "$kmajor" -gt 3 -o "$kmajor" -eq 3 -a "$kminor" -gt 17; then
 			echo "WARNING: That kernel version is not officially supported yet. Continue at own luck.";
 		elif test "$kmajor" -eq 3 -a "$kminor" -ge 7; then
 			:;
--- a/doc/changelog.txt
+++ b/doc/changelog.txt
@@ -3,6 +3,15 @@ HEAD
 ====


+v2.6 (2014-09-29)
+=================
+Enhancements:
+- Support for Linux 3.16, 3.17
+Fixes:
+- xt_pknock: UDP SPA mode erroneously returned an error saying
+  crypto was unavailable
+
+
 v2.5 (2014-04-18)
 =================
 Enhancements:
--- a/extensions/compat_xtables.h
+++ b/extensions/compat_xtables.h
@@ -54,8 +54,8 @@ static inline struct inode *file_inode(struct file *f)
 #endif

 #if LINUX_VERSION_CODE < KERNEL_VERSION(3, 10, 0)
-static inline void
-proc_set_user(struct proc_dir_entry *de, kuid_t uid, kgid_t gid)
+static inline void proc_set_user(struct proc_dir_entry *de,
+    typeof(de->uid) uid, typeof(de->gid) gid)
 {
 	de->uid = uid;
 	de->gid = gid;
--- a/extensions/pknock/xt_pknock.c
+++ b/extensions/pknock/xt_pknock.c
@@ -1058,9 +1058,6 @@ static int pknock_mt_check(const struct xt_mtchk_param *par)

 	if (!(info->option & XT_PKNOCK_NAME))
 		RETURN_ERR("You must specify --name option.\n");
-	if (info->option & (XT_PKNOCK_OPENSECRET | XT_PKNOCK_CLOSESECRET))
-		RETURN_ERR("No crypto support available; "
-			"cannot use opensecret/closescret\n");
 	if (info->option & XT_PKNOCK_OPENSECRET && info->ports_count != 1)
 		RETURN_ERR("--opensecret must have just one knock port\n");
 	if (info->option & XT_PKNOCK_KNOCKPORT) {
--- a/xtables-addons.8.in
+++ b/xtables-addons.8.in
@@ -1,4 +1,4 @@
-.TH xtables-addons 8 "SFUAN" "" "v2.5 (2014-04-18)"
+.TH xtables-addons 8 "Red October" "" "v2.6 (2014-09-29)"
 .SH Name
 Xtables-addons \(em additional extensions for iptables, ip6tables, etc.
 .SH Targets
Author	SHA1	Message	Date
Jan Engelhardt	a576f4d43e	Xtables-addons 2.6	2014-09-29 10:33:13 +02:00
Jan Engelhardt	cc17e1d0fe	build: explicitly support Linux 3.16, 3.17	2014-09-04 18:50:35 +02:00
Adam Butcher	c08835d65c	xt_pknock: fix pknock in UDP SPA mode When the PK_CRYPTO pre-processor flag got removed in v1.47.1-2-g66f213e, one of the removal cases was misapplied; the body of an "#ifndef PK_CRYPTO" was left in rather than the whole section being removed.	2014-09-04 18:45:42 +02:00
Adam Butcher	4c21811919	src: work with typeof Although not officially supported, we have found that the xtables-addons modules we are interested in work fine on 3.0.4 with a slight non-invasive mod to compat_xtables.h.	2014-09-04 18:44:52 +02:00