#!/bin/sh
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# iptables -t nat -F
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# # Display the table, so we know it is correct.
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# iptables -t nat -L -n
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination         

Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# iptables -L -n
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination         
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# echo done.
done.
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# grep -e 'fragment number:' -e 'total fragments:' /tmp/pluto.log
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm 1]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 1 final.sh 'grep -e 'fragment number:' -e 'total fragments:' /tmp/pluto.log' <<<<<<<<<<tuc<<<<<<<<<<: ==== cut ====
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# ipsec auto --status
whack: Pluto is not running (no "/run/pluto/pluto.ctl")
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm 33]# >>>>>>>>>>cutnonzeroexit>>>>>>>>>> exit status 33 final.sh 'ipsec auto --status' <<<<<<<<<<tuc<<<<<<<<<<: ==== tuc ====
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# ../bin/check-for-core.sh
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# if [ -f /sbin/ausearch ]; then ausearch -r -m avc -ts recent ; fi
type=AVC msg=audit(1566825937.207:218845): avc:  denied  { write } for  pid=14468 comm="ip" path="/tmp/pluto.log" dev="dm-0" ino=1016581500 scontext=unconfined_u:system_r:ifconfig_t:s0 tcontext=unconfined_u:object_r:container_file_t:s0:c718,c778 tclass=file permissive=1
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]# : ==== end ====
kroot@swantest:/home/build/libreswan/testing/pluto/x509-ikev2-frag-01-ike-aes_gcm\[root@nic x509-ikev2-frag-01-ike-aes_gcm]#