#!/bin/sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# # Display the table, so we know it is correct.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# iptables -t nat -L
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# # this should show encap tunnel on both ends
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# ip xfrm state |grep encap
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ip xfrm state |grep encap' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566824781.750:169760): avc:  denied  { write } for  pid=5361 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=942309374 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825117.148:183810): avc:  denied  { write } for  pid=18946 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=544350239 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-nat-pluto-03\[root@nic ikev2-nat-pluto-03]#