Build results of 1eac046 (on master)

Changes

@@ -1,3 +1,32 @@
+5.016     2016-10-31 17:30:24+01:00 Europe/Berlin
+
+ - Fixed security issue with generated object-groups.
+   If object-group G1 has element B that was combined from B1, B2,
+   and some other group G2 has same elements as G1 but with B1 instead of B,
+   then G1 was erroneously reused instead of definig a new object-group G2.
+ - Changed syntax for owners.
+   Owners are now propagated to inner objects per default.
+   New attributes:
+   - "only_watch"
+     This owner will not be inherited by inner owners,
+     but it will still be able to watch all inner owners.
+     This attribute is only valid at areas.
+   - "hide_from_outer_owners"
+     If given at an inner owner, services of this owner will
+     not be watchable by outer owners.
+   - "show_hidden_owners"
+     This cancels the effect of 'hide_from_outer_owners'.
+     This attribute is also enabled implicitly by attribute 'show_all'.
+   Some attributes are deprecated and will be removed in next version:
+   - "extend"
+     This is default now.
+   - "extend_only"
+     This was partially replaced by only_watch.
+   - "extend_unbounded"
+     This attribute is useless now.
+ - Command "print-group" now is able to process multiple groups at once.
+   Use option "-f" to read group definitions from file.
+
 5.015     2016-08-12 14:27:52+02:00 Europe/Berlin
 
  - Fixed export host / interface with static NAT of network with

MANIFEST

@@ -68,6 +68,7 @@ pod-links/rename-netspoc.pod
 t/Test_Group.pm
 t/Test_Netspoc.pm
 t/add-to-netspoc.t
+t/adjacent-net.t
 t/aggregate.t
 t/any-multicast-interface.t
 t/area.t

META.yml

@@ -37,5 +37,5 @@ requires:
   open: '0'
   strict: '0'
   warnings: '0'
-version: '5.015'
+version: '5.016'
 x_serialization_backend: 'YAML::Tiny version 1.69'

Makefile.PL

@@ -55,7 +55,7 @@ my %WriteMakefileArgs = (
     "Test::More" => 0,
     "lib" => 0
   },
-  "VERSION" => "5.015",
+  "VERSION" => "5.016",
   "test" => {
     "TESTS" => "t/*.t"
   }

README

@@ -1,7 +1,7 @@
 
 
 This archive contains the distribution Netspoc,
-version 5.015:
+version 5.016:
 
   Generates rules for many firewalls from a central ruleset.
 

bin/add-to-netspoc

@@ -80,7 +80,7 @@ use Getopt::Long;
 use Pod::Usage;
 use Encode;
 
-our $VERSION = '5.015'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '5.016'; # VERSION: inserted by DZP::OurPkgVersion
 my $filename_encode = 'UTF-8';
 
 my $ignore_files = '^(raw|config|CVS|RCS|\.#.*|.*~)$';

bin/cut-netspoc

@@ -63,7 +63,7 @@ use Netspoc::Compiler::Common;
 use Netspoc::Compiler::Pass1;
 use Encode qw(decode_utf8);
 
-our $VERSION = '5.015'; # VERSION: inserted by DZP::OurPkgVersion
+our $VERSION = '5.016'; # VERSION: inserted by DZP::OurPkgVersion
 
 ####################################################################
 # Argument processing
@@ -538,16 +538,6 @@ for my $router (values %routers) {
             $interface->{network}->{is_used} = 1;
         }
     }
-
-    # Remove unused hosts referenced in attribute radius_servers.
-    if (my $hosts = $router->{radius_servers}) {
-	for my $host (@$hosts) {
-            my $used_host_names = 
-                join ', ', map { $_->{name} } grep { $_->{is_used} } @$hosts;
-            my $new_code = "radius_servers = $used_host_names;";
-            change_attribute_src_code('radius_servers', $router, $new_code);
-	}
-    }
 }
 
 # Remove definitions of unused hosts from networks.