firewalld rdepends on nftables-python #280

wdobbe · 2020-09-25T15:10:09Z

While backporting firewalld 0.9.0 to my Zeus BSP I discovered that firewalld >= 0.8 doesn't start if nftables-python isn't installed.

In file /usr/lib/python3.x/site-packages/firewall/core/nftables.py the line:

from nftables.nftables import Nftables

fails if nftables-python is not installed.

The text was updated successfully, but these errors were encountered:

…s runtime dependency was missing in firewalld recipe

…s runtime dependency was missing in firewalld recipe. Signed-off-by: Winfried Dobbe <[email protected]>

Fixes Issue openembedded#280 Signed-off-by: Winfried Dobbe <[email protected]> Signed-off-by: Khem Raj <[email protected]>

sateesh0457 · 2022-03-23T12:20:22Z

Hi Kraj,

           I have built the 0.9.4 version. there nftables-python rdepends provided. could you please check this issue? what I missed.

Error :1
ERROR:dbus.proxies:Introspect error on :1.6208:/org/fedoraproject/FirewallD1: dbus.exceptions.DBusException: org.freedesktop.DBus.Error.NoReply: Did not receive a reply. Possible causes include: the remote application did not send a reply, the message bus security policy blocked the reply, the reply timeout expired, or the network connection was broken.

Error:2
firewall-cmd --state
ERROR:dbus.proxies:Introspect error on :1.277:/org/fedoraproject/FirewallD1: dbus.exceptions.DBusException: org.fedoraproject.FirewallD1.Exception: 'FirewallD' object has no attribute 'path'
Error: 'FirewallD' object has no attribute 'fw'

Thanks & Regards,
Sateesh
.

- `universal`: Enable `application/vnd.cups-postscript` as input There are filters which produce this MIME type (such as `hpps` of HPLIP), and if someone uses such driver on a client and the server has an IPP Everywhere/driverless printer, the job fails (Pull request openembedded#534). - beh backend: Use `execv()` instead of `system()` - CVE-2023-24805 With `execv()` command line arguments are passed as separate strings and not the full command line in a single string. This prevents arbitrary command execution by escaping the quoting of the arguments in a job with forged job title. - beh backend: Extra checks against odd/forged input - CVE-2023-24805 * Do not allow `/` in the scheme of the URI (= backend executable name), to assure that only backends inside `/usr/lib/cups/backend/` are used. * Pre-define scheme buffer to empty string, to be defined for case of URI being NULL. * URI must have `:`, to split off scheme, otherwise error. * Check return value of `snprintf()` to create call path for backend, to error out on truncation of a too long scheme or on complete failure due to a completely odd scheme. - beh backend: Further improvements - CVE-2023-24805 * Use `strncat()` instead of `strncpy()` for getting scheme from URI, the latter does not require setting terminating zero byte in case of truncation. * Also exclude `.` or `..` as scheme, as directories are not valid CUPS backends. * Do not use `fprintf()` in `sigterm_handler()`, to not interfere with a `fprintf()` which could be running in the main process when `sigterm_handler()` is triggered. * Use `static volatile int` for global variable job_canceled. - `parallel` backend: Added missing `#include` lines - foomatic-rip: Fix a SIGPIPE error when calling gs (Pull request openembedded#517) [Ubuntu's autopkgtest for foo2zjs](https://autopkgtest.ubuntu.com/packages/f/foo2zjs/lunar/ppc64el) shows foo2zjs's testsuite failing with cups-filters 2.0beta3 on ppc64el. This is cause by a timing issue in foomatic-rip which is fixed now. - Coverity check done by Zdenek Dohnal for the inclusion of cups-filters in Fedora and Red Hat. Zdenek has fixed all the issues: Missing `free()`, files not closed, potential string overflows, ... Thanks a lot! (Pull request openembedded#510). - Dropped all C++ references and obsolete C standards (Pull requests openembedded#504 and openembedded#513) With no C++ compiler needed, there is no need for any checks or setting for C++ in configure.ac. - configure.ac: Change deprecated AC_PROG_LIBTOOL for LT_INIT (Pull request openembedded#508) - texttopdf: Do not include fontconfig.h in the CUPS filter wrapper - Build system: Do not explicitly check for libpoppler-cpp The cups-filters package does not contain any code using libpoppler-cpp, therefore we let ./configure not check for it. - COPYING, NOTICE: Simplification for autotools-generated files autotools-generated files can be included under the license of the upstream code, and FSF copyright added to upstream copyright list. Simplified COPYING appropriately. - Makefile.am: Include LICENSE in distribution tarball - Add templates for issue reports on GitHub. This makes a selection screen appear when clicking "New Issue" in the web UI, to selct whether the issue is a regular bug, a feature request, or a security vulnerability. - Corrected installation path for *.h files of *.drv files. The ppdc (and underlying functions) of libppd searches for include files in /usr/share/ppdc and not in /usr/share/cups/ppdc any more. - configure.ac: Remove unnecessary "AVAHI_GLIB_..." definitions. - Makefile.am: Include NOTICE in distribution tarball - configure.ac: Added "foreign" to to AM_INIT_AUTOMAKE() call. Makes automake not require a file named README. - Cleaned up .gitignore - Tons of fixes in the source code documentation: README.md, INSTALL, DEVELOPING.md, CONTRIBUTING.md, COPYING, NOTICE, ... Adapted to the cups-filters component, added links. - Converted nearly all filters to filter functions, only exceptions are `rastertoescpx`, `rastertopclx`, `commandtoescpx`, `commandtopclx`, and `foomatic-rip`. The latter is deeply involved with Foomatic PPDs and the others are legacy printer drivers. The filter functions are mainly in libcupsfilters, the ones which generate PostScript are in libppd. - Replaced all the filters converted to filter functions by simple wrapper executables using `ppdFilterCUPSWrapper()` of libppd for backward compatibility with CUPS 2.x. - Added new streaming mode triggered by the boolean "filter-streaming-mode" option. In this mode a filter (function) is supposed to avoid everything which prevents the job data from streaming, as loading the whole job (or good part of it) into a temporary file or into memory, interpreting PDF, pre-checking input file type or zero-page jobs, ... This is mainly to be used by Printer Applications when they do raster printing in streaming mode, to run with lowest resources possible. Currently `foomatic-rip`, `ghostscript`, and `pdftopdf` got a streaming mode. For the former two PostScript (not PDF) is assumed as input and no zero-page-job check is done, in the latter all QPDF processing (page management, page size adjustment, ...) is skipped and only JCL according to the PPD added. - The CUPS filter `imagetops` uses the `ppdFilterImageToPS()` filter function of libppd now. - `driverless`, `driverless-fax`: Added IPP Fax Out support. Now printer setup tools list an additional fax "driver". A fax queue is created by selecting this driver. Jobs have to be sent with "-o phone=12345" to supply the destination phone number (Pull request openembedded#280, openembedded#293, openembedded#296, openembedded#302, openembedded#304, openembedded#305, openembedded#306, openembedded#309, Issue openembedded#298, openembedded#308). - `sys5ippprinter`: Removed `sys5ippprinter`, as CUPS does not support System V interface scripts any more. This first approach of PPD-less printing was also not actually made use of. - `urftopdf`: Removed as we require CUPS 2.2.2+ now which supports Apple Raster by itself. - Build system, `README.md`: Require CUPS 2.2.2+. Removed now unneeded `./configure` switches for use of the `urftopdf` filter for old CUPS versions. - Sample PPDs: Renamed source directory from `ppd/` to `ppdfiles/`. - Build system: Remove '-D_PPD_DEPRECATED=""' from the compiling command lines of the source files which use libcups. The flag is not supported any more for longer times already and all the PPD-related functions deprecated by CUPS have moved into libppd now. - Build system: Add files in `.gitignore` that are generated by "autogen.sh", "configure", and "make" (Pull request openembedded#336). Signed-off-by: Markus Volk <[email protected]> Signed-off-by: Khem Raj <[email protected]>

Overview of changes in gnome-calculator 47.0 * Updated translations * Fixed flatpak build !181 (Hari Rana) * Don't use symbolic icons for the window !182 (Balló György) Overview of changes in gnome-calculator 47.rc * Updated translations * Added brand colors !178 (Brage Fuglseth) Overview of changes in gnome-calculator 47.beta * Updated translations * Fix hex string conversion for bitwise operator !177 (Xiong Nandi) * Force LTR for buttons !171 (Khalid Abu Shawarib) * Added kWh, MJ, KJ unit support openembedded#417 (Robert Roth) * Sort conversion categories alphabetically openembedded#395 (Robert Roth) * Removed obsolete bulgarian translations openembedded#402 (Robert Roth) * Only allow alphanumeric values for variable names openembedded#396 (Robert Roth) * Replace base_label with buttons !173 (Clément Mathieu--Drif) * Updated flathub badge !174 (Brage Fuglseth) * Use adwaita spinner !175 (Cristopher Davis) Overview of changes in gnome-calculator 47.alpha * Updated translations * Support VND currency openembedded#387 (Robert Roth) * Fixed incorrect event handling openembedded#392 (Robert Roth) * Removed Shift left/right dropdown openembedded#330 (Robert Roth) * Improved popover remove buttons openembedded#401 (Robert Roth) * Use result format instead of number format openembedded#399 (Robert Roth) * Ported to Adwaita adaptive dialogs (Robert Roth) * Disable undo button if nothing to undo openembedded#280 (Robert Roth) * Metainfo improvements (Andre Klapper) * Keep last conversion options at launch openembedded#351 (Robert Roth) * Minor improvements to the undo button !166 (Automeris naranja) * Make sure to use the correct app id for development builds !170 (Christopher Davis) * Stop using orange accent color !169 (Alice Mikhaylenko) * A11y announce status changes !172 (Lukáš Tyrychtr) Signed-off-by: Markus Volk <[email protected]> Signed-off-by: Khem Raj <[email protected]>

wdobbe pushed a commit to wdobbe/meta-openembedded that referenced this issue Sep 25, 2020

Issue openembedded#280: firewalld rdepends on nftables-python but thi…

8e64e0c

…s runtime dependency was missing in firewalld recipe

wdobbe mentioned this issue Sep 25, 2020

Issue #280: firewalld rdepends on nftables-python but this runtime de… #281

Closed

wdobbe pushed a commit to wdobbe/meta-openembedded that referenced this issue Sep 25, 2020

Issue openembedded#280: firewalld rdepends on nftables-python but thi…

f46389a

…s runtime dependency was missing in firewalld recipe. Signed-off-by: Winfried Dobbe <[email protected]>

kraj pushed a commit to YoeDistro/meta-openembedded that referenced this issue Sep 26, 2020

firewalld: Add missing rdep on nftables-python

e6d442a

Fixes Issue openembedded#280 Signed-off-by: Winfried Dobbe <[email protected]> Signed-off-by: Khem Raj <[email protected]>

kraj added the bug label Sep 26, 2020

kraj pushed a commit to YoeDistro/meta-openembedded that referenced this issue Sep 26, 2020

firewalld: Add missing rdep on nftables-python

332b784

Fixes Issue openembedded#280 Signed-off-by: Winfried Dobbe <[email protected]> Signed-off-by: Khem Raj <[email protected]>

kraj pushed a commit to YoeDistro/meta-openembedded that referenced this issue Sep 26, 2020

firewalld: Add missing rdep on nftables-python

9252472

Fixes Issue openembedded#280 Signed-off-by: Winfried Dobbe <[email protected]> Signed-off-by: Khem Raj <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

firewalld rdepends on nftables-python #280

firewalld rdepends on nftables-python #280

wdobbe commented Sep 25, 2020

sateesh0457 commented Mar 23, 2022

firewalld rdepends on nftables-python #280

firewalld rdepends on nftables-python #280

Comments

wdobbe commented Sep 25, 2020

sateesh0457 commented Mar 23, 2022