From cd43e516d3a4301be9e993cce94a48624650bb37 Mon Sep 17 00:00:00 2001 From: Phil Sutter Date: Tue, 21 Nov 2017 23:13:39 +0100 Subject: tests: shell: Prevent lockout in nft-f/0008split_tables_0 Since packets traverse both tables, the accept rule in the first one is ineffective due to the second table's drop policy. To prevent lockouts when running the testsuite via SSH connection, set the second chain's policy to accept as well. Fixes: 337c7e0de3d9d ("tests: shell: make sure split table definition works via nft -f") Signed-off-by: Phil Sutter Signed-off-by: Pablo Neira Ayuso --- tests/shell/testcases/nft-f/0008split_tables_0 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'tests/shell') diff --git a/tests/shell/testcases/nft-f/0008split_tables_0 b/tests/shell/testcases/nft-f/0008split_tables_0 index 2bc6e46c..dd03545b 100755 --- a/tests/shell/testcases/nft-f/0008split_tables_0 +++ b/tests/shell/testcases/nft-f/0008split_tables_0 @@ -19,7 +19,7 @@ RULESET="table inet filter { table inet filter { chain input { - type filter hook input priority 1; policy drop; + type filter hook input priority 1; policy accept; } }" @@ -37,7 +37,7 @@ EXPECTED="table inet filter { } chain input { - type filter hook input priority 1; policy drop; + type filter hook input priority 1; policy accept; } }" -- cgit v1.2.3