From patchwork Sat Jul 23 07:11:39 2016 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Liping Zhang X-Patchwork-Id: 651836 X-Patchwork-Delegate: pablo@netfilter.org Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by ozlabs.org (Postfix) with ESMTP id 3rxJdB52VWz9t15 for ; Sat, 23 Jul 2016 17:13:02 +1000 (AEST) Authentication-Results: ozlabs.org; dkim=fail reason="signature verification failed" (1024-bit key; unprotected) header.d=163.com header.i=@163.com header.b=PCJGBrWf; dkim-atps=neutral Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1750828AbcGWHM6 (ORCPT ); Sat, 23 Jul 2016 03:12:58 -0400 Received: from m12-17.163.com ([220.181.12.17]:59207 "EHLO m12-17.163.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750774AbcGWHM6 (ORCPT ); Sat, 23 Jul 2016 03:12:58 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=163.com; s=s110527; h=From:Subject:Date:Message-Id; bh=zu8rnQfJwmByY3+sYa JkD7tiS/w82WThoEZD7Qv2ybs=; b=PCJGBrWfcaqvS2JGH1l7GvvIiDWYrt7du/ DAq/eXNSJNWPS3KUDTy7/p7uUwno9nHHd2lVdsOFSDJM+/JhdoxKDS6Ki9jaJeJR MymcE1dLWm26NFNgxq82eHW1k3xsqaPs8dpLbPQPeWikmsSS5Ie5DfeOXidyVZMM pN6Pb08TM= Received: from MiWiFi-R2D-srv.localdomain (unknown [180.170.252.41]) by smtp13 (Coremail) with SMTP id EcCowADn+ojeGJNXdMilAg--.8691S2; Sat, 23 Jul 2016 15:12:39 +0800 (CST) From: Liping Zhang To: pablo@netfilter.org Cc: netfilter-devel@vger.kernel.org, Liping Zhang Subject: [PATCH iptables] extensions: libxt_connlabel: add unit test Date: Sat, 23 Jul 2016 15:11:39 +0800 Message-Id: <1469257899-27058-1-git-send-email-zlpnobody@163.com> X-Mailer: git-send-email 2.5.5 X-CM-TRANSID: EcCowADn+ojeGJNXdMilAg--.8691S2 X-Coremail-Antispam: 1Uf129KBjvJXoW7ZFW3Zry7KFWkAr4xCryDKFg_yoW8XFW7p3 47Jw15KFWrt34fJa4DXr1Utr4YvF4kJa4xCw43Ka4YqF9xGry8Cr40yr1xGF9rXw43GF9r X3y3JF1DZay8G37anT9S1TB71UUUUUUqnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDUYxBIdaVFxhVjvjDU0xZFpf9x07jUAwsUUUUU= X-Originating-IP: [180.170.252.41] X-CM-SenderInfo: x2os00perg5qqrwthudrp/1tbiNgivl1WBS-jk+QAAs8 Sender: netfilter-devel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netfilter-devel@vger.kernel.org From: Liping Zhang Add some unit tests for connlabel match extension: # ./iptables-test.py extensions/libxt_connlabel.t extensions/libxt_connlabel.t: OK 1 test files, 7 unit tests, 7 passed Signed-off-by: Liping Zhang --- extensions/libxt_connlabel.t | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 extensions/libxt_connlabel.t diff --git a/extensions/libxt_connlabel.t b/extensions/libxt_connlabel.t new file mode 100644 index 0000000..aad1032 --- /dev/null +++ b/extensions/libxt_connlabel.t @@ -0,0 +1,18 @@ +:INPUT,FORWARD,OUTPUT +# Backup the connlabel.conf, then add some label maps for test +@[ -f /etc/xtables/connlabel.conf ] && mv /etc/xtables/connlabel.conf /tmp/connlabel.conf.bak +@mkdir -p /etc/xtables +@echo "40 bit40" > /etc/xtables/connlabel.conf +@echo "41 bit41" >> /etc/xtables/connlabel.conf +@echo "128 bit128" >> /etc/xtables/connlabel.conf +-m connlabel --label "bit40";=;OK +-m connlabel ! --label "bit40";=;OK +-m connlabel --label "bit41" --set;=;OK +-m connlabel ! --label "bit41" --set;=;OK +-m connlabel --label "bit128";;FAIL +@echo > /etc/xtables/connlabel.conf +-m connlabel --label "abc";;FAIL +@rm -f /etc/xtables/connlabel.conf +-m connlabel --label "abc";;FAIL +# Restore the original connlabel.conf +@[ -f /tmp/connlabel.conf.bak ] && mv /tmp/connlabel.conf.bak /etc/xtables/connlabel.conf