#!/bin/sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# # Display the table, so we know it is correct.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# echo done.
done.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# # should not match anything
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# grep "already in use" /tmp/pluto.log
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep "already in use" /tmp/pluto.log' <<<<<<<<<<tuc<<<<<<<<<<# should only show 1 connection
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# should only show 1 connection' <<<<<<<<<<tuc<<<<<<<<<<ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825081.575:180903): avc:  denied  { write } for  pid=4842 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=582773705 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-27-uniqueid\[root@nic ikev2-27-uniqueid]#