diff options
| author | Florian Westphal <fw@strlen.de> | 2024-07-07 20:42:15 +0200 |
|---|---|---|
| committer | Florian Westphal <fw@strlen.de> | 2024-07-11 17:05:21 +0200 |
| commit | 8428710ba713d430777e87e8adb3bc16af9911d2 (patch) | |
| tree | 1052552f3aada04c39725d3e69ba666bfb2ca0c1 /tests/shell/testcases/chains/netdev_chain_dev_gone | |
| parent | 477fd8218777b75bdfa3a5643f692adae4f002fe (diff) | |
tests: shell: add more ruleset validation test cases
Passes fine on all tested kernel releases.
Same as existing tests, but try harder to fool the validation:
1. Add a ruleset where the jump that that exceeds 16 is "broken", i.e.
c0 -> c1 ... -> c8
c9-> c1 ... -> c16
Where c0 is a base chain, with a graph thats really a linear list
from c0 to c8 and c9 to c16 is a linear list not connected to the former
or a hook point.
Then try to link them either directly via jump/goto rule or indirectly
with a verdict map.
Try both unbound map with element doing 'goto c9' and then trying to add
vmap rule to c8 (must fail, creates link).
Then try reverse: with empty map, add vmap rule to c8 (should work, no
elements...).
Then, add map element with jump or goto to c9. This should be rejected.
Try the same thing with a tproxy expression in a user-defined chain:
attempt to make it reachable from c0 (filter input), which is illegal.
Signed-off-by: Florian Westphal <fw@strlen.de>
Diffstat (limited to 'tests/shell/testcases/chains/netdev_chain_dev_gone')
0 files changed, 0 insertions, 0 deletions
