Introduce systemd units wrt bug #479490.

Package-Manager: portage-2.2.8-r1/cvs/Linux x86_64
Manifest-Sign-Key: 0xEFB4464E!

9 files changed, 173 insertions, 22 deletions

diff --git a/net-firewall/iptables/ChangeLog b/net-firewall/iptables/ChangeLog
index fcad2227627e..d17e0994e0bc 100644
--- a/net-firewall/iptables/ChangeLog
+++ b/net-firewall/iptables/ChangeLog
@@ -1,6 +1,16 @@
 # ChangeLog for net-firewall/iptables
 # Copyright 1999-2014 Gentoo Foundation; Distributed under the GPL v2
-# $Header: /var/cvsroot/gentoo-x86/net-firewall/iptables/ChangeLog,v 1.306 2014/01/18 19:48:53 ago Exp $
+# $Header: /var/cvsroot/gentoo-x86/net-firewall/iptables/ChangeLog,v 1.307 2014/02/18 15:49:19 mgorny Exp $
+
+*iptables-1.4.21-r1 (18 Feb 2014)
+
+  18 Feb 2014; Michał Górny <mgorny@gentoo.org>
+  +files/systemd/ip6tables-restore.service,
+  +files/systemd/ip6tables-store.service, +files/systemd/ip6tables.service,
+  +files/systemd/iptables-restore.service,
+  +files/systemd/iptables-store.service, +files/systemd/iptables.service,
+  +iptables-1.4.21-r1.ebuild:
+  Introduce systemd units wrt bug #479490.
 
   18 Jan 2014; Agostino Sarubbo <ago@gentoo.org> iptables-1.4.20.ebuild:
   Stable for alpha, wrt bug #485190
diff --git a/net-firewall/iptables/Manifest b/net-firewall/iptables/Manifest
index 4c28ba0bec9a..c6e572e3cf5c 100644
--- a/net-firewall/iptables/Manifest
+++ b/net-firewall/iptables/Manifest
@@ -1,6 +1,3 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA256
-
 AUX ip6tables-1.3.2.confd 293 SHA256 c93827ac2b8fdd83e2c36788053ee7567ceb13b3cbc5fcf40d186500e05c8104 SHA512 d9d69a7a4006f2554d1cc94c9214a7c31dca635d81054dd43a6df6ede26d870c6da0ad678d06e292edaa72e3574a04e81dee5c7b79d24ce4c2e7bd60b0cb45db WHIRLPOOL 13bf072675368faf40772a9bc1f1d09ee21d3fe02307d46fe6b3df91c78c6366fc999b507db5f6fc368d3d8d40034ad9f3f1572698cf06cd83c6874d0e750689
 AUX ip6tables-1.4.13.confd 690 SHA256 2938fe4206514d9868047bd8f888a699fa2097ca69edab176453436d4259abaa SHA512 8de9a5de4061bef217fbc07577688a8110f1116af7f3b936dfd18100a6a7a47ec6e70c456b24cf3432fb4f2034b741a487fe6af8d9740f174d51c6eb16945c6e WHIRLPOOL f2f4903812b5b97d5bdf9cb28f0bcb6f8c866f197b46a9128530721a8d9db1cdcedffe2512c9235391a67f494c2daf1266d7bc8a6185949756437221c3861a10
 AUX iptables-1.3.2.confd 290 SHA256 351e123ba9e0ec7db2bcff42849aa627d29a3b2e77a47b82386f5e3a7e21bd30 SHA512 3ce83c3283e6695e0c17b0e09daf1f434c6e99f5e38ed3d1e2f37be072c47af52d16585625ae61f31cbf63c4de8ccf3b47d7e4203b06fb3acc5b7ed8924964f4 WHIRLPOOL 5dde07feabdbe38c8cee6d97138a4dae27237c559f35f1aa67e60535627166b49e20aaa3dc53b732ff4e54858236e0cfa52af3387e98dd2f1cf936c57ad7ff2e
@@ -16,6 +13,12 @@ AUX iptables-1.4.16.2-static.patch 2437 SHA256 fd56eaf9a400caa7c25f9893058bbde57
 AUX iptables-1.4.17-libip6tc.patch 1084 SHA256 5940f8020a131df4baa03578256ea9ff4fd975c913e062e3876e64e61a6fa8f3 SHA512 1d91231ad352c16a2af2c5d8593a59b8af4d5d9d4a7248a46170c843e85976bc34b4998f2cb86496cacd1ba30520cd3fe0d41705b7e5f4550bae7da70553ef2d WHIRLPOOL 027368602724dcbda0ddcd443c4a90aee278f409cfe0b3ce221a4e1826d10a4a0d95f6cbe18f887e712b4076161ba2e7adf0d09cf2055224f81ecadd173e5a73
 AUX iptables-1.4.18-extensions-link.patch 2717 SHA256 cf73e86b3077f13dd8f287276b766b0e27c29d809335dbe4cc84adc86c254731 SHA512 a53861ab1c6ea703a46c3300a35217ba9205355614a5109b9aeb441a34cad5ac020b4e2d014b88976a53901fe6031c332d87a488050bce7689022753dc795d51 WHIRLPOOL 1bafbfabe562c08d37dfa911c8f11c4b60c7269b764842078559b4352f4287715092752ed6b2c412b32469d1297e579df86cc77cdb32256c5f5904ac82e75262
 AUX iptables-1.4.18-ipv6-linkage.patch 3006 SHA256 c242affce8ff2edfe946c4bbe4f39edd0cfe8a870ed1cbd808863fab57870f11 SHA512 1cfabdeac2e031451cf4c86396893ab34d093d523f25e9bb7f8ab617d4c9c0d03ffc9707ff42bd24bd7951f2b8ee752f1c4b7e4fbab919f67b6773596bf514bf WHIRLPOOL a4253fdf0ba67ca7887f87737c401b480567c7fac50514a53fac81716a7175d841b1a185a945a46487405e5ffe1921b88f897990ab329b28621c3e4cafb62ed9
+AUX systemd/ip6tables-restore.service 395 SHA256 679ba8327bf037e991ff07d8cf910009c67026b0faf8112d75c945b64f4b64de SHA512 e41f7bc55b2b58452b993ccb42014b5bc2701aeeef46eee845a2b016b334299ff4e6d11ba22f3aaff47195f1049dc7fd4be41a7055911420230107b1ee4c6ba3 WHIRLPOOL 232d90f8591358fe853c8c4b569b2825ba02ced59d390232a7f7fb535e3bfbbcb70972938506cbead5e6b57845310f5a91c1fd225898f185cffb96ba7d4d97f3
+AUX systemd/ip6tables-store.service 243 SHA256 ce93fc2ba81f7693877479ddc75cdec94627c302a140bd27ff30656fad78e72b SHA512 7cee224f91d4c8348606ba176d0d689749a59229958cfdf4e75451d77271363e7cff71dbb7e30dbc4a5a837363a72d70d6960d2dfb218f3ad16456ae109cba10 WHIRLPOOL d84687a142843fa9cd930171e817652afb22b950214349ca156ba6da174312989973d17fed04cd129c18d4d6fbd5ad3124b9afa0d105d128333248c90fdb4ca6
+AUX systemd/ip6tables.service 133 SHA256 1b8d342ffdf471ef25e365dacf106e1899b438dad4bf9154cfad2d5217c3a019 SHA512 f871e694a8c666a59840c4c7ae1f355dc47f481501b3472601b65460c1d6e163a7e33f7a6c42a84ac33131ddb96170b316e83507a43f1ede54d61446f81950dc WHIRLPOOL 24140e7398cfa494210b8d3b773bdca5ee1abbbdb29c2921e84ff025848e26844b5c20fadefa9b961ce14564ce8daa9b8e9f197b7d7ec70c26bb6609b74b10d0
+AUX systemd/iptables-restore.service 391 SHA256 ace3b2085700bde96f0597e8c6f3b8524c28d4f9b6c924deb09b164a5b8e979c SHA512 222a088d487f8e5c199aec4a3619f8c8ee620ffca13c35fd3da8daf926db25fa5203226a6f4a2c426622d935ffd57c02ad4ff5edbca922f8168e29fc3e52c516 WHIRLPOOL 507cfef3650fcce3a17d56edfb39110d08397bbd96c88cb21c2cdb74c69b920142f0f68f71312ae7a6013057e0ab500546a0075806dd424fc85b9aebdb76b5f4
+AUX systemd/iptables-store.service 240 SHA256 14965fd0f3cd4285e77ea1e3d9975a818b0d64fb0026b925d8434896b2cbf839 SHA512 a720e92b5571a2c3427101105e95e555f3b72541a53c5daa43e361c99ca28830e9e8dd27dbd7cfed40fbbe289ed180f9be7e0f3b6b0cd19bba022a531815fd5e WHIRLPOOL e3a5b77b2c19ad8445a21cc9c8680c2d632d968483357221fac1c309275bd17aa25c05cf23188d5ae644d5b1266c64b3dd5fe8fbdec9f2a439a212c3d1c767db
+AUX systemd/iptables.service 130 SHA256 c404c54c98521817aca75b96774a24684e0c7ed2fc8de2ced78f4ae4d8a6b99d SHA512 87114ccc7eb079d1ed43d77be35cf4c91702ca960883a4bbca5dfcf74aa6f086e44f4a4251441ac3a277c93eb10e7482157caf2d62bbf2a7f5327947ede25bef WHIRLPOOL 844296866dfe2fe6b1207c99d2f938f4c87a37592e95576f9504fe056fe82fc29878b9aa1a204fa31d6711fbe7ba5cd48f7a639e4839bbe366e6220246a0d3c3
 DIST iptables-1.4.10.tar.bz2 478007 SHA256 7544e437d2222078b15e6cd063b521c6f1ec4dac49e6af9ba3bfece2a6a93445 SHA512 264a974cc303cf9b352ccdf50d3aa1491167cdf1d7919074925645cc94d7f5e40d315cff048d0fab48e31853dcdad64bd65b83ef6fdd05f9e896be4e3317cd1e WHIRLPOOL 4ca6629ed2f43f1393be5a24284147272ff208d27e8bc073ccadb80f27887f2ef2c477e08ab2f8f22414cd11ab6a33dc42071f2ee3168e15026a76a3270cbc2e
 DIST iptables-1.4.11.1.tar.bz2 486926 SHA256 170c294698ca573477b1b2a3815e1563bf9929d182efef6cf0331a6e955c9ade SHA512 432dff8d1bc2b65cd636bb7a8d9ace5402db134df6e5e15c11c2bf1684d513a0f3cf70af099875fbddb25a1ef8868716b4a80791d7475848dd9d7917752d451a WHIRLPOOL ace3dc5ed59f98faea78cce2f1e673cb9b9726360cb1fcaa6ff73b9c36ba2ece8b415f191f1c6862a85829bb857202571bb851132a503ffb272c078d87889cbf
 DIST iptables-1.4.12.1.tar.bz2 473418 SHA256 77e6581f21f15946a814fa311236e5f3f7c6593180f9d695cea06aa95e464aba SHA512 ca8960d6d11faaba293e62169a32f8821d9240907d7ca11741dfca78ce92e32d5e2625f99786f55fb08d27ff7643e2531cc741aa0867f45df61248264b8ffe18 WHIRLPOOL b737fb2704511066d052227f7fe73a1ce64f427c614e56a1a681a7dcc37bac214448f9821b416a35cbe7efdf5436c49d0202f6da77aa0ec60de724137d28abda
@@ -47,24 +50,8 @@ EBUILD iptables-1.4.17.ebuild 2355 SHA256 c7656bc972eb6cf702aa10ba04682ae5457bf2
 EBUILD iptables-1.4.18.ebuild 2424 SHA256 14f273e0d6ac1d3df9d073f666a448d7db68b8fe64e3641dcda8ac28ca082cf6 SHA512 d835d34529a4e6609ac712de9a16eda946e4f35afe6fdbb2161f0c3c9c726f52167c142d0609510040d51273e13f984760f97f9ebdfb4db9ce03592915db01ee WHIRLPOOL 902e9678fe338d190d4a2f21a2b62d342ee322cfd15801bdd0f9d3ceac8c0edb2f34b46d23b9161b3ea4d187371fa4596eb6198fc97cf533171857afdca4a526
 EBUILD iptables-1.4.19.1.ebuild 2272 SHA256 09792d07161882524fcce8bfb58d1528b297209cf5b1882c3cf24d87c08345c3 SHA512 bb1794e7a5f0250e900f90a6f9b156573e86a90eb8cda0194e5cba8da91cea14d16c2e2a8c638fa6ee1ca84549514d2ac4d32c92b00a75c6409b15f92135cad9 WHIRLPOOL 98527eb9faafbe7c59f7578aae9112fb0f094baaf8baf4c842db35701cfc10f6a0b49b6c1daba754d0208388678c3f240f26a5799c07a663508df0aea2a13faa
 EBUILD iptables-1.4.20.ebuild 2259 SHA256 79abddb985d116c1c32176870c05df5e783cb61bc71ab471f3e7e54b2577318c SHA512 151eb7700969aa6a01788bc678d7fe27d20578028b33cfb8e76495b7b373e266642b4fd55f253d1254603d93cccd0bf9722f69fb0dd9a6bc66a06e1c23a27644 WHIRLPOOL e6380dbcf88ebcb91e3e8a7479b9d7e778d09219113480541d7156c47901080b3c44dc3903586524cbb078b904f6819be904007e5450a8cdc6e305bc849d2d7b
+EBUILD iptables-1.4.21-r1.ebuild 2450 SHA256 5afe24601a0107815bf1dd1505d0f02d4f6cba975ffc0201aace242037828aea SHA512 cd53c4ff16861de125a155685d661e8009808f7b5529639364b88c2fad982a7ade0c420fb5d714723999b8476cd39afcc9d416d3f0faaf1ae00b6eab056ed76e WHIRLPOOL 2d59c91724151eef1200f161e87d92584f7980f45ccaa9b948082f33f89ca0a8dd526ba4ee785386ac36b2e8a47270b4c3614ede1adfab4c16b450445738dd22
 EBUILD iptables-1.4.21.ebuild 2274 SHA256 a7c717d3dac16cced81dcb81639d8a4c4a393250e5af84604390f6e715178de1 SHA512 43a05cafd091c9f107f983608a7c63361c067a258c9e39959c622ea6b0a6008a24cf0ec4c0af93dd46151a79c534c60df39ac316bc8a9b1738464276c611597e WHIRLPOOL cb8110f1013c02c790cc02ca96583f41fe1bed85e24e3514f9d6ee53b2967e16471014a732316a40a6359b993efb6fe0214893c2d729e069ae25a7971cfd0785
 EBUILD iptables-1.4.6.ebuild 1443 SHA256 3ca97a6095af334fe9b734329ae8e2a58ac78dd1f7a52e0295b203eec4e5178c SHA512 a30301a6f28cc5b90c97b58f37f04005f01313b66f6cb2b5b65294d0612887147d99a7cc8a73940c48a5e4f7d504e643a1e3f0664383bbf7e2e24017944b4436 WHIRLPOOL 836783d6a1f9b733edb965742996cbcac2869a3f716b9b78af4ae912a051919c61c2beb1ea061262da9f80c647db6892e597981ed75d8d5a94cef813722727a4
-MISC ChangeLog 51989 SHA256 d0e4a1f5e250509b0a442ecfdd6b7ad3e69bfb4677e8843bd7eb31e2356bf603 SHA512 641b04799a184c3edf82f949216d15b0e9bb98ff9310239acbb6c65a0665f1ceab9045e2186f2ad0939edf5cd796b7627797472117f43ee653a3a889aece5c1e WHIRLPOOL b1299d0afe20fb1bae69b46c49d9b3d855cfd70dfb9b0e5591b635f8382ae8a3d4d9e9b25dd8ae2ce0c46d4708d5575206a18ac7e37d4192245bb48ee2f3445c
+MISC ChangeLog 52388 SHA256 a9e9ef96289867a7e0fd3d020bf74c6e2ddc856fb510b97a02a2c0a235df931a SHA512 a75c74fdc72c9e2cdaa0c7d5b192fe190d1900f037dbe7d090149edb819ab814a0728cb04fc5ae29b90afc35b7c705de7de2767deb0ba86163167aacf4768bb6 WHIRLPOOL c4b16beb0f419d7a2aff35dac9381d258c2d9607210cf64f440706b8770b3dd154b19a7ad9e6af361b0fff5b1a6b2d63df729b28feccb9b6fb6dbb8ca32939df
 MISC metadata.xml 1069 SHA256 91c6679d742c254b368f9a18cb42a3d29f90a9b691dda61967152b629e2abaa2 SHA512 395b2b3b812cc99d31ea812ad2e42fe52e9fc3e5fcd17db18b95b1dba09495bb5124760308ba46a463b47cb089d587819600d5883a313314a865628fa00f6907 WHIRLPOOL 6e1e2717c19802d94f155c6841a0b7cef10ad38cd338e3e5ba8eab671b433c547fbe816a234f8e02ad1a0bfd6f69695ff643f3ca62a99a6d51be8108eb79e9ce
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.22 (GNU/Linux)
-
-iQIcBAEBCAAGBQJS2tqmAAoJELp701BxlEWftr4QALGDUIQlfnQgWHnzedEoQ8gp
-wiuSRElQy8Dw7P8fHMcxB3czql9BzoIaseQ8uTSctOOQz5xca7TePWj5tsC9RlxJ
-Lv15W68pG26vZuYjaF2LHBKj15cm/CHunvuN4Q0Ism0FWyomWZ6dbsDyIo1OvvRx
-/NaTmN/sU5GKONfegxmD/CUpWNaO/0rdMaeplWzLTy8BFsiaMNTpC9Gg5vAMQGja
-DsF3BauQPXI7UO6eWQ7pu5i/Ds067rp6WMOwxwEc2DolVp1XLFWBKnPUpU6IqwrE
-JrkOTZETtFIQUd0RDIhypVBLDOr4hUDn3Z5TLFdmeMaBqK8xusZkPmPqTncugoG3
-MvTWbfOv+bD05372eFlzLlzW6ZrfIVPHKOa+3dAt900qYf2l/aC2eQC24/gkYnEj
-fFD01niPBmPnJ6Sl+lH8fssbI3RVGlcjv8/3wS8IChHB1Fn40cvs3a5UWhOxOtqh
-xme3E1DbyZqIjll0eghi+lO7w0i8D+DzAcll3v4T6A/S+kAPkAXMVtiwGLSamsAn
-kepXQBlhGeqV5Dx/Vu2W59IydBWIzNVQBHvZUbVxGAm4GH51KA8C4W96yBcVS/5+
-flWNWO61cP4cCKdBjyMUHPGzzxFwd08fSqBdPZuXWY7FNkjpvH7ozwoHYJomyrJT
-DYBzWR/T5kMcfWrwRPj7
-=Kz8r
------END PGP SIGNATURE-----
diff --git a/net-firewall/iptables/files/systemd/ip6tables-restore.service b/net-firewall/iptables/files/systemd/ip6tables-restore.service
new file mode 100644
index 000000000000..88415fa37a64
--- /dev/null
+++ b/net-firewall/iptables/files/systemd/ip6tables-restore.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=Restore ip6tables firewall rules
+# if both are queued for some reason, don't store before restoring :)
+Before=ip6tables-store.service
+# sounds reasonable to have firewall up before any of the services go up
+Before=network.target
+Conflicts=shutdown.target
+
+[Service]
+Type=oneshot
+ExecStart=/sbin/ip6tables-restore /var/lib/ip6tables/rules-save
+
+[Install]
+WantedBy=basic.target
diff --git a/net-firewall/iptables/files/systemd/ip6tables-store.service b/net-firewall/iptables/files/systemd/ip6tables-store.service
new file mode 100644
index 000000000000..9975378353d3
--- /dev/null
+++ b/net-firewall/iptables/files/systemd/ip6tables-store.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=Store ip6tables firewall rules
+Before=shutdown.target
+DefaultDependencies=No
+
+[Service]
+Type=oneshot
+ExecStart=/bin/sh -c "/sbin/ip6tables-save --counters > /var/lib/ip6tables/rules-save"
+
+[Install]
+WantedBy=shutdown.target
diff --git a/net-firewall/iptables/files/systemd/ip6tables.service b/net-firewall/iptables/files/systemd/ip6tables.service
new file mode 100644
index 000000000000..0a6d7fa1c8ab
--- /dev/null
+++ b/net-firewall/iptables/files/systemd/ip6tables.service
@@ -0,0 +1,6 @@
+[Unit]
+Description=Store and restore ip6tables firewall rules
+
+[Install]
+Also=ip6tables-store.service
+Also=ip6tables-restore.service
diff --git a/net-firewall/iptables/files/systemd/iptables-restore.service b/net-firewall/iptables/files/systemd/iptables-restore.service
new file mode 100644
index 000000000000..9d568d78b309
--- /dev/null
+++ b/net-firewall/iptables/files/systemd/iptables-restore.service
@@ -0,0 +1,14 @@
+[Unit]
+Description=Restore iptables firewall rules
+# if both are queued for some reason, don't store before restoring :)
+Before=iptables-store.service
+# sounds reasonable to have firewall up before any of the services go up
+Before=network.target
+Conflicts=shutdown.target
+
+[Service]
+Type=oneshot
+ExecStart=/sbin/iptables-restore /var/lib/iptables/rules-save
+
+[Install]
+WantedBy=basic.target
diff --git a/net-firewall/iptables/files/systemd/iptables-store.service b/net-firewall/iptables/files/systemd/iptables-store.service
new file mode 100644
index 000000000000..aa16e75e9ccf
--- /dev/null
+++ b/net-firewall/iptables/files/systemd/iptables-store.service
@@ -0,0 +1,11 @@
+[Unit]
+Description=Store iptables firewall rules
+Before=shutdown.target
+DefaultDependencies=No
+
+[Service]
+Type=oneshot
+ExecStart=/bin/sh -c "/sbin/iptables-save --counters > /var/lib/iptables/rules-save"
+
+[Install]
+WantedBy=shutdown.target
diff --git a/net-firewall/iptables/files/systemd/iptables.service b/net-firewall/iptables/files/systemd/iptables.service
new file mode 100644
index 000000000000..3643a3e31034
--- /dev/null
+++ b/net-firewall/iptables/files/systemd/iptables.service
@@ -0,0 +1,6 @@
+[Unit]
+Description=Store and restore iptables firewall rules
+
+[Install]
+Also=iptables-store.service
+Also=iptables-restore.service
diff --git a/net-firewall/iptables/iptables-1.4.21-r1.ebuild b/net-firewall/iptables/iptables-1.4.21-r1.ebuild
new file mode 100644
index 000000000000..3becf43be2d9
--- /dev/null
+++ b/net-firewall/iptables/iptables-1.4.21-r1.ebuild
@@ -0,0 +1,92 @@
+# Copyright 1999-2014 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+# $Header: /var/cvsroot/gentoo-x86/net-firewall/iptables/iptables-1.4.21-r1.ebuild,v 1.1 2014/02/18 15:49:19 mgorny Exp $
+
+EAPI="5"
+
+# Force users doing their own patches to install their own tools
+AUTOTOOLS_AUTO_DEPEND=no
+
+inherit eutils multilib systemd toolchain-funcs autotools
+
+DESCRIPTION="Linux kernel (2.4+) firewall, NAT and packet mangling tools"
+HOMEPAGE="http://www.netfilter.org/projects/iptables/"
+SRC_URI="http://www.netfilter.org/projects/iptables/files/${P}.tar.bz2"
+
+LICENSE="GPL-2"
+SLOT="0"
+KEYWORDS="~alpha ~amd64 ~arm ~arm64 ~hppa ~ia64 ~m68k ~mips ~ppc ~ppc64 ~s390 ~sh ~sparc ~x86"
+IUSE="ipv6 netlink static-libs"
+
+RDEPEND="
+	netlink? ( net-libs/libnfnetlink )
+"
+DEPEND="${RDEPEND}
+	virtual/os-headers
+	virtual/pkgconfig
+"
+
+src_prepare() {
+	# use the saner headers from the kernel
+	rm -f include/linux/{kernel,types}.h
+
+	# Only run autotools if user patched something
+	epatch_user && eautoreconf || elibtoolize
+}
+
+src_configure() {
+	# Some libs use $(AR) rather than libtool to build #444282
+	tc-export AR
+
+	sed -i \
+		-e "/nfnetlink=[01]/s:=[01]:=$(usex netlink 1 0):" \
+		configure || die
+
+	econf \
+		--sbindir="${EPREFIX}/sbin" \
+		--libexecdir="${EPREFIX}/$(get_libdir)" \
+		--enable-devel \
+		--enable-shared \
+		$(use_enable static-libs static) \
+		$(use_enable ipv6)
+}
+
+src_compile() {
+	emake V=1
+}
+
+src_install() {
+	default
+	dodoc INCOMPATIBILITIES iptables/iptables.xslt
+
+	# all the iptables binaries are in /sbin, so might as well
+	# put these small files in with them
+	into /
+	dosbin iptables/iptables-apply
+	dosym iptables-apply /sbin/ip6tables-apply
+	doman iptables/iptables-apply.8
+
+	insinto /usr/include
+	doins include/iptables.h $(use ipv6 && echo include/ip6tables.h)
+	insinto /usr/include/iptables
+	doins include/iptables/internal.h
+
+	keepdir /var/lib/iptables
+	newinitd "${FILESDIR}"/${PN}-1.4.13-r1.init iptables
+	newconfd "${FILESDIR}"/${PN}-1.4.13.confd iptables
+	if use ipv6 ; then
+		keepdir /var/lib/ip6tables
+		newinitd "${FILESDIR}"/iptables-1.4.13-r1.init ip6tables
+		newconfd "${FILESDIR}"/ip6tables-1.4.13.confd ip6tables
+	fi
+
+	systemd_dounit "${FILESDIR}"/systemd/iptables{,-{re,}store}.service
+	if use ipv6 ; then
+		systemd_dounit "${FILESDIR}"/systemd/ip6tables{,-{re,}store}.service
+	fi
+
+	# Move important libs to /lib
+	gen_usr_ldscript -a ip{4,6}tc iptc xtables
+
+	prune_libtool_files
+}