/testing/guestbin/swan-prep --x509 Preparing X.509 files kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# ipsec _stackmanager start kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# # confirm that the network is alive kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# ../../pluto/bin/wait-until-alive -I 192.0.1.254 192.0.2.254 destination -I 192.0.1.254 192.0.2.254 is alive kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# /usr/local/libexec/ipsec/pluto --config /etc/ipsec.conf --leak-detective kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# /testing/pluto/bin/wait-until-pluto-started kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# ipsec auto --add westnet-eastnet-ikev2 002 added connection description "westnet-eastnet-ikev2" kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# echo "initdone" initdone kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# ipsec whack --impair delete-on-retransmit kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# ipsec auto --up westnet-eastnet-ikev2 002 "westnet-eastnet-ikev2" #1: initiating Main Mode 102 "westnet-eastnet-ikev2" #1: STATE_MAIN_I1: initiate 002 "westnet-eastnet-ikev2" #1: IMPAIR: retransmit so deleting SA 002 "westnet-eastnet-ikev2" #1: deleting state (STATE_MAIN_I1) aged 0.502s and NOT sending notification kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# echo done done kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# ipsec whack --shutdown 002 shutting down kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# grep leak /tmp/pluto.log leak-detective enabled leak detective found no leaks kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# ../bin/check-for-core.sh kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi type=AVC msg=audit(1566824781.750:169760): avc: denied { write } for pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1 type=AVC msg=audit(1566824937.078:173892): avc: denied { write } for pid=20983 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=8124126 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1 type=AVC msg=audit(1566824937.573:173909): avc: denied { write } for pid=22066 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=943376378 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1 type=AVC msg=audit(1566824938.513:173988): avc: denied { write } for pid=22941 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=294906551 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1 kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]# : ==== end ==== kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-12-x509-ikev1-rw\[root@west ikev2-12-x509-ikev1-rw]#