BF: remove all non-existing services from PartOf of fail2ban.service.

Should resolve inability to restart firewalld (its .service is
left in PartOf) upon upgrades.
pull/2221/head
Yaroslav Halchenko 2018-04-04 00:49:28 -04:00
parent 75a11a4a92
commit 450b890fb1
3 changed files with 36 additions and 1 deletions

8
debian/changelog vendored
View File

@ -2,8 +2,14 @@ fail2ban (0.10.2-2) unstable; urgency=medium
[ Arturo Borrero Gonzalez ]
* Recommend nftables as an alternative to iptables (Closes: #892472)
[ Yaroslav Halchenko ]
* debian/patches/deb_no_iptables_service (Closes: #871993)
- remove all non-existing services from PartOf of fail2ban.service.
Should resolve inability to restart firewalld (its .service is
left in PartOf) upon upgrades.
-- Yaroslav Halchenko <debian@onerussian.com> Sat, 10 Mar 2018 08:32:43 -0500
-- Yaroslav Halchenko <debian@onerussian.com> Wed, 04 Apr 2018 00:47:53 -0400
fail2ban (0.10.2-1) unstable; urgency=medium

28
debian/patches/deb_no_iptables_service vendored Normal file
View File

@ -0,0 +1,28 @@
From: Yaroslav Halchenko <debian@onerussian.com>
Subject: Remove all non-provided .service's within PartOf of fail2ban.service
As reported and corroborated in the bug report, this causes inability
of firewalld to restart.
Correct solution would involve making systemd smarter and tune up
of involved .service files.
Since Debian ATM doesn't provide any of those ({ip{,6}tables,ipset}.service)
files, it should be safe and generic enough to just prune them from PartOf
Thanks Joe Cooper <swelljoe@gmail.com> and Sunil Mohan Adapa <sunil@medhas.org>
for the reports and nagging ;)
Origin: Fedora, Debian
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=871993
Last-Update: 2018-04-04
--- a/files/fail2ban.service.in
+++ b/files/fail2ban.service.in
@@ -2,7 +2,7 @@
Description=Fail2Ban Service
Documentation=man:fail2ban(1)
After=network.target iptables.service firewalld.service ip6tables.service ipset.service
-PartOf=iptables.service firewalld.service ip6tables.service ipset.service
+PartOf=firewalld.service
[Service]
Type=simple

View File

@ -6,3 +6,4 @@ deb_manpages_reportbug
0003-BF-look-for-system.journal-also-under-system-state-l.patch
0004-BF-use-build_-_2to3-if-in-_2to3.patch
0001-BF-RF-test-for-being-a-root-to-check-if-actually-can.patch
deb_no_iptables_service