From 66191ce8b9c03cea1525f3f73f543ecf06cd58c4 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Thu, 23 Feb 2023 20:36:43 +0100 Subject: tests: shell: cover rule insertion by index Original patch including this feature did not include a test, add it. Fixes: 816d8c7659c1 ("Support 'add/insert rule index '") Reported-by: Phil Sutter Signed-off-by: Pablo Neira Ayuso --- tests/shell/testcases/cache/0011_index_0 | 12 ++++++++++++ tests/shell/testcases/cache/dumps/0011_index_0.nft | 8 ++++++++ 2 files changed, 20 insertions(+) create mode 100755 tests/shell/testcases/cache/0011_index_0 create mode 100644 tests/shell/testcases/cache/dumps/0011_index_0.nft diff --git a/tests/shell/testcases/cache/0011_index_0 b/tests/shell/testcases/cache/0011_index_0 new file mode 100755 index 00000000..c9eb8683 --- /dev/null +++ b/tests/shell/testcases/cache/0011_index_0 @@ -0,0 +1,12 @@ +#!/bin/bash + +set -e + +RULESET="flush ruleset +add table inet t +add chain inet t c { type filter hook input priority 0 ; } +add rule inet t c tcp dport 1234 accept +add rule inet t c accept +insert rule inet t c index 1 udp dport 4321 accept" + +$NFT -f - <<< "$RULESET" diff --git a/tests/shell/testcases/cache/dumps/0011_index_0.nft b/tests/shell/testcases/cache/dumps/0011_index_0.nft new file mode 100644 index 00000000..7e855eb1 --- /dev/null +++ b/tests/shell/testcases/cache/dumps/0011_index_0.nft @@ -0,0 +1,8 @@ +table inet t { + chain c { + type filter hook input priority filter; policy accept; + tcp dport 1234 accept + udp dport 4321 accept + accept + } +} -- cgit v1.2.3