From d89e5c0c84778a4effa40f69dbd3a68d0ec284fc Mon Sep 17 00:00:00 2001 From: Liping Zhang Date: Sat, 23 Jul 2016 15:11:39 +0800 Subject: extensions: libxt_connlabel: add unit test Add some unit tests for connlabel match extension: # ./iptables-test.py extensions/libxt_connlabel.t extensions/libxt_connlabel.t: OK 1 test files, 7 unit tests, 7 passed Signed-off-by: Liping Zhang Signed-off-by: Pablo Neira Ayuso --- extensions/libxt_connlabel.t | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 extensions/libxt_connlabel.t (limited to 'extensions') diff --git a/extensions/libxt_connlabel.t b/extensions/libxt_connlabel.t new file mode 100644 index 00000000..aad1032b --- /dev/null +++ b/extensions/libxt_connlabel.t @@ -0,0 +1,18 @@ +:INPUT,FORWARD,OUTPUT +# Backup the connlabel.conf, then add some label maps for test +@[ -f /etc/xtables/connlabel.conf ] && mv /etc/xtables/connlabel.conf /tmp/connlabel.conf.bak +@mkdir -p /etc/xtables +@echo "40 bit40" > /etc/xtables/connlabel.conf +@echo "41 bit41" >> /etc/xtables/connlabel.conf +@echo "128 bit128" >> /etc/xtables/connlabel.conf +-m connlabel --label "bit40";=;OK +-m connlabel ! --label "bit40";=;OK +-m connlabel --label "bit41" --set;=;OK +-m connlabel ! --label "bit41" --set;=;OK +-m connlabel --label "bit128";;FAIL +@echo > /etc/xtables/connlabel.conf +-m connlabel --label "abc";;FAIL +@rm -f /etc/xtables/connlabel.conf +-m connlabel --label "abc";;FAIL +# Restore the original connlabel.conf +@[ -f /tmp/connlabel.conf.bak ] && mv /tmp/connlabel.conf.bak /etc/xtables/connlabel.conf -- cgit v1.2.3