#!/bin/sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# iptables -F
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# echo done.
done.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# # on east this should show 2 sets of in/fwd/out policies
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# ../../pluto/bin/ipsec-look.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# # check both connections still work on east
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# hostname | grep east > /dev/null && ping -c2 192.0.2.101
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'hostname | grep east > /dev/null && ping -c2 192.0.2.101' <<<<<<<<<<tuc<<<<<<<<<<hostname | grep east > /dev/null && ping -c2 192.0.2.102
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'hostname | grep east > /dev/null && ping -c2 192.0.2.102' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev1-psk-two-rw-id-ip-01\[root@nic ikev1-psk-two-rw-id-ip-01]#