#!/bin/sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# # Display the table, so we know it is correct.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# echo done.
done.
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# ../../pluto/bin/ipsec-look.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# # confirm east is in unrouted state again
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# hostname | grep east > /dev/null && ipsec status |grep "eroute owner"
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'hostname | grep east > /dev/null && ipsec status |grep "eroute owner"' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566826262.016:237258): avc:  denied  { write } for  pid=23142 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=581795971 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566826265.629:237368): avc:  denied  { write } for  pid=24699 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=1016646947 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/ikev2-redirect-01-global\[root@nic ikev2-redirect-01-global]#