GitLab

These paths are managed by update-alternatives, no need to ship them in the
package.

Closes: #911899
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Merge the binary package into the main iptables package now that compat tools
are the main ones.

While at it, move all binaries to /usr/sbin/ instead of /sbin. No reason for
them to live there.

TODO:
 * actual tests for symlinking issues
 * adjust manpages
 * check update-alternatives
 * check relationships
 * check READMEs etc
 * wrap-and-sort
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Now the old iptables binary is server at /sbin/iptables-legacy.
Then, using the update-alternatives system one can choose which binary is going
to provide the actual /sbin/iptables tool, either iptables-legacy or
the newer iptables-compat (nf_tables compat).

The compat version is given more priority by default.
Signed-off-by: Arturo Borrero Gonzalez <arturo@debian.org>

Export DEB_BUILD_MAINT_OPTIONS = hardening=+all

No need to use variables.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

No longer needed. As stated in the dh_shlibdeps manpage,
the tool is now smarter and doesn't require the options in our override.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

This commit does two interleaved things:

* finis Multi-Arch support by changing dirs names, missing in commit:
   637406a0

 ("iptables: make it Multi-Arch: foreign")

* move libs from /lib to /usr/lib/

Therefore, the final change is, for example:
 /lib -> /usr/lib/x86_64-linux-gnu

Files already under /usr/lib are simply moved to /usr/lib/<arch>
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>

This library has been deprecated in favour of libnetfilter_queue a long
time ago.
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>