#/usr/sbin/named
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# iptables -F
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# # both ends should only show 1 tunnel`
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# ipsec whack --trafficstatus
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec whack --trafficstatus' <<<<<<<<<<tuc<<<<<<<<<<# check for a counting bug where total SA's is wrong on east
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh '# check for a counting bug where total SA's is wrong on east' <<<<<<<<<<tuc<<<<<<<<<<ipsec status | grep 'authenticated'
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'ipsec status | grep 'authenticated'' <<<<<<<<<<tuc<<<<<<<<<<# verify no packets were dropped due to missing SPD policies
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh '# verify no packets were dropped due to missing SPD policies' <<<<<<<<<<tuc<<<<<<<<<<grep -v -P "\t0$" /proc/net/xfrm_stat
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep -v -P "\t0$" /proc/net/xfrm_stat' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825657.022:208526): avc:  denied  { write } for  pid=16495 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=63539633 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/newoe-27-replace-sa-authnull-authnull\[root@nic newoe-27-replace-sa-authnull-authnull]#