#!/bin/sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# # Display the table, so we know it is correct.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# echo done.
done.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# # should not match anything
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# grep "already in use" /tmp/pluto.log
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep "already in use" /tmp/pluto.log' <<<<<<<<<<tuc<<<<<<<<<<# should only show 1 connection
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# should only show 1 connection' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825940.671:219060): avc:  denied  { write } for  pid=17351 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63921051 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-27-uniqueid\[root@nic ikev1-27-uniqueid]#