/testing/guestbin/swan-prep
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# cp policies/* /etc/ipsec.d/policies/
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# echo "192.1.3.0/24"  >> /etc/ipsec.d/policies/private-or-clear
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Redirecting to: /etc/init.d/ipsec start
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Error: Peer netns reference is invalid.
Starting pluto IKE daemon for IPsec: 
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# /testing/pluto/bin/wait-until-pluto-started
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# # give OE policies time to load
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# sleep 5
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# echo "initdone"
initdone
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# # both ends should only show 1 tunnel`
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# ipsec whack --trafficstatus
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<# check for a counting bug where total SA's is wrong on east
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# check for a counting bug where total SA's is wrong on east' <<<<<<<<<<tuc<<<<<<<<<<ipsec status | grep 'authenticated'
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ipsec status | grep 'authenticated'' <<<<<<<<<<tuc<<<<<<<<<<# verify no packets were dropped due to missing SPD policies
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# verify no packets were dropped due to missing SPD policies' <<<<<<<<<<tuc<<<<<<<<<<grep -v -P "\t0$" /proc/net/xfrm_stat
XfrmOutNoStates         	7
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# : ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# ipsec auto --status
whack: is Pluto running?  connect() for "/run/pluto/pluto.ctl" failed (111 Connection refused)
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825654.748:208365): avc:  denied  { write } for  pid=14889 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=295025865 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825655.118:208405): avc:  denied  { write } for  pid=15139 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63854839 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825655.118:208406): avc:  denied  { write } for  pid=15137 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63785413 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
type=AVC msg=audit(1566825655.870:208468): avc:  denied  { write } for  pid=15877 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63854839 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@east newoe-27-replace-sa-authnull-authnull]#