mirror of
https://github.com/Ponce/slackbuilds
synced 2024-12-04 00:56:07 +01:00
130 lines
5.1 KiB
Bash
130 lines
5.1 KiB
Bash
#!/bin/sh
|
|
|
|
# Slackware build script for arno-iptables-firewall
|
|
|
|
# Copyright 2013-2014 Philip Lacroix <philnx at posteo dot de>
|
|
# All rights reserved.
|
|
#
|
|
# Redistribution and use of this script, with or without modification, is
|
|
# permitted provided that the following conditions are met:
|
|
#
|
|
# 1. Redistributions of this script must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED
|
|
# WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
|
|
# MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO
|
|
# EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
# SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
|
|
# PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS;
|
|
# OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
|
|
# WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
|
|
# OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
|
|
# ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
|
|
# Thanks to Matteo Bernardini and Robby Workman for their valuable remarks
|
|
# after the first submission of this SlackBuild.
|
|
|
|
PRGNAM=arno-iptables-firewall
|
|
SRCNAM=aif
|
|
VERSION=${VERSION:-2.0.1e}
|
|
BUILD=${BUILD:-2}
|
|
TAG=${TAG:-_SBo}
|
|
|
|
CWD=$(pwd)
|
|
TMP=${TMP:-/tmp/SBo}
|
|
PKG=${PKG:-$TMP/package-$PRGNAM}
|
|
OUTPUT=${OUTPUT:-/tmp}
|
|
|
|
set -e
|
|
|
|
rm -rf $PKG
|
|
mkdir -p $TMP $PKG $OUTPUT
|
|
cd $TMP
|
|
rm -rf $SRCNAM-$VERSION
|
|
tar xvf $CWD/$VERSION.tar.gz
|
|
|
|
cd $SRCNAM-$VERSION
|
|
chown -R root:root .
|
|
find -L . \
|
|
\( -perm 777 -o -perm 775 -o -perm 750 -o -perm 711 -o -perm 555 \
|
|
-o -perm 511 \) -exec chmod 755 {} \; -o \
|
|
\( -perm 666 -o -perm 664 -o -perm 600 -o -perm 444 -o -perm 440 \
|
|
-o -perm 400 \) -exec chmod 644 {} \;
|
|
|
|
PRGBIN=$PKG/usr/sbin
|
|
PRGETC=$PKG/etc/$PRGNAM
|
|
PRGSHR=$PKG/usr/share/$PRGNAM
|
|
PRGDOC=$PKG/usr/doc/$PRGNAM-$VERSION
|
|
PRGMAN=$PKG/usr/man
|
|
|
|
# Install configuration, log filter and firewall executables; set
|
|
# permissions.
|
|
install -m 0755 -D ./configure.sh $PRGBIN/$PRGNAM-configure
|
|
install -m 0755 ./bin/arno-fwfilter $PRGBIN/
|
|
install -m 0755 ./bin/$PRGNAM $PRGBIN/
|
|
|
|
# Patch the configuration script. We need this in order to be able to
|
|
# run the script from outside the source directory as well. We're going
|
|
# to (1) change from relative to absolute the paths to the environment
|
|
# file and firewall executable; (2) rename and change the path to the
|
|
# startup script (this is for better consistency with Slackware's init
|
|
# system); (3) change the path to the unmodified copy of the config
|
|
# file, needed to check for existing custom setups. We will NOT create
|
|
# a Slackware-compliant /etc/rc.d/rc.firewall symlink to the startup
|
|
# script, as this should be done manually by the sysadmin. We won't
|
|
# create any SystemV-style symlinks either. (4) We will allow the script
|
|
# to be run correctly more than once, by removing previously set values
|
|
# if no value is entered: this is to prevent e.g. ports from remaining
|
|
# open, or internal interfaces from remaining enabled with NAT. Finally
|
|
# (5) we append the note, picked from the original installation script
|
|
# and slightly enhanced, that the user will see when configuration is
|
|
# done: this is to inform that an rc.firewall symlink has to be created
|
|
# in order to start up the firewall at boot-time in a proper way.
|
|
patch $PRGBIN/$PRGNAM-configure < $CWD/files/patch-configuration-script.diff
|
|
|
|
# Copy and compress man pages.
|
|
mkdir -p $PRGMAN
|
|
cp -a ./share/man/* $PRGMAN/
|
|
find $PRGMAN -type f -exec gzip -9 {} \;
|
|
|
|
# Copy and rename configuration files; apply patch to main config file
|
|
# in order to fix paths; set permissions.
|
|
mkdir -p $PRGETC/conf.d
|
|
cp -a ./etc/$PRGNAM/* $PRGETC/
|
|
cat $CWD/files/conf.d.readme > $PRGETC/conf.d/README
|
|
patch $PRGETC/firewall.conf < $CWD/files/patch-configuration-file.diff
|
|
for conf in $( find $PRGETC -type f -not -name README ); do
|
|
mv ${conf} ${conf}.new
|
|
chmod 600 ${conf}.new
|
|
done
|
|
|
|
# Copy shared data; include a clean copy of the configuration file, as
|
|
# expected by the configuration script for comparison purposes; create
|
|
# link to plugin as in the original script.
|
|
mkdir -p $PRGSHR
|
|
cp -a ./share/$PRGNAM/* $PRGSHR/
|
|
cp -a $PRGETC/firewall.conf.new $PRGSHR/firewall.conf.orig
|
|
ln -sv /usr/share/$PRGNAM/plugins/traffic-accounting-show $PRGBIN/
|
|
|
|
# Install startup script and set permissions; apply patch to fix path
|
|
# to the executable file and make comments more consistent with the
|
|
# Slackware system.
|
|
install -m 0644 -D ./etc/init.d/$PRGNAM $PKG/etc/rc.d/rc.$PRGNAM
|
|
patch $PKG/etc/rc.d/rc.$PRGNAM < $CWD/files/patch-startup-script.diff
|
|
|
|
# Copy documentation, including third-party sample files.
|
|
mkdir -p $PRGDOC/contrib
|
|
for doc in README CHANGELOG gpl_license.txt ; do
|
|
cp -a ./${doc} $PRGDOC/
|
|
done
|
|
cp -a ./contrib/adsl-failover $PRGDOC/contrib/
|
|
cp -a ./contrib/Slackware/syslog.conf $PRGDOC/contrib/
|
|
cat $CWD/$PRGNAM.SlackBuild > $PRGDOC/$PRGNAM.SlackBuild
|
|
|
|
mkdir -p $PKG/install
|
|
cat $CWD/slack-desc > $PKG/install/slack-desc
|
|
cat $CWD/doinst.sh > $PKG/install/doinst.sh
|
|
|
|
cd $PKG
|
|
/sbin/makepkg -l y -c n $OUTPUT/$PRGNAM-$VERSION-noarch-$BUILD$TAG.${PKGTYPE:-tgz}
|