|
 |
24f428 |
From b23b014be322044a190acfb97c80f9e5e99c6dfe Mon Sep 17 00:00:00 2001
|
|
|
24f428 |
From: Eric Garver <e@erig.me>
|
|
|
24f428 |
Date: Thu, 13 Dec 2018 12:19:21 -0500
|
|
|
24f428 |
Subject: [PATCH 09/23] tests/regression/rhbz1601610: modify test to satisfy
|
|
|
24f428 |
buggy kernel versions
|
|
|
24f428 |
|
|
|
24f428 |
Older versions of nftables (kernel) had issues with overlapping sets.
|
|
|
24f428 |
Let's use non-overlapping sets to avoid the kernel bug while still
|
|
|
24f428 |
exercising the cases we want.
|
|
|
24f428 |
|
|
|
24f428 |
This in a kernel bug that was fixed back in v4.6. nftables backend
|
|
|
24f428 |
requires v4.18, but the CI uses a really old kernel.
|
|
|
24f428 |
|
|
|
24f428 |
Kernel fix:
|
|
|
24f428 |
e701001e7cbe ("netfilter: nft_rbtree: allow adjacent intervals with
|
|
|
24f428 |
dynamic updates")
|
|
|
24f428 |
|
|
|
24f428 |
(cherry picked from commit 7925d6ff9dde7e52efed6a28427364b30dbdc363)
|
|
|
24f428 |
---
|
|
|
24f428 |
src/tests/regression/rhbz1601610.at | 10 +++++-----
|
|
|
24f428 |
1 file changed, 5 insertions(+), 5 deletions(-)
|
|
|
24f428 |
|
|
|
24f428 |
diff --git a/src/tests/regression/rhbz1601610.at b/src/tests/regression/rhbz1601610.at
|
|
|
24f428 |
index 5ba0cee44be0..17129a541041 100644
|
|
|
24f428 |
--- a/src/tests/regression/rhbz1601610.at
|
|
|
24f428 |
+++ b/src/tests/regression/rhbz1601610.at
|
|
|
24f428 |
@@ -58,7 +58,7 @@ FWD_CHECK([--permanent --ipset=foobar --get-entries], 0, [
|
|
|
24f428 |
])
|
|
|
24f428 |
|
|
|
24f428 |
dnl rhbz 1644834
|
|
|
24f428 |
-FWD_CHECK([-q --ipset=foobar --add-entry=10.1.0.0/16])
|
|
|
24f428 |
+FWD_CHECK([-q --ipset=foobar --add-entry=10.3.0.0/22])
|
|
|
24f428 |
FWD_CHECK([-q --runtime-to-permanent])
|
|
|
24f428 |
FWD_RELOAD
|
|
|
24f428 |
m4_if(nftables, FIREWALL_BACKEND, [
|
|
|
24f428 |
@@ -67,7 +67,7 @@ table inet firewalld {
|
|
|
24f428 |
set foobar {
|
|
|
24f428 |
type ipv4_addr
|
|
|
24f428 |
flags interval
|
|
|
24f428 |
-elements = { 10.1.0.0/16, 10.2.0.0/22 }
|
|
|
24f428 |
+elements = { 10.2.0.0/22, 10.3.0.0/22 }
|
|
|
24f428 |
}
|
|
|
24f428 |
}
|
|
|
24f428 |
])], [
|
|
|
24f428 |
@@ -75,8 +75,8 @@ IPSET_LIST_SET([foobar], 0, [dnl
|
|
|
24f428 |
Name: foobar
|
|
|
24f428 |
Type: hash:net
|
|
|
24f428 |
Members:
|
|
|
24f428 |
-10.1.0.0/16
|
|
|
24f428 |
10.2.0.0/22
|
|
|
24f428 |
+10.3.0.0/22
|
|
|
24f428 |
])])
|
|
|
24f428 |
|
|
|
24f428 |
dnl rhbz 1644834, again with IndividualCalls=yes
|
|
|
24f428 |
@@ -88,7 +88,7 @@ table inet firewalld {
|
|
|
24f428 |
set foobar {
|
|
|
24f428 |
type ipv4_addr
|
|
|
24f428 |
flags interval
|
|
|
24f428 |
-elements = { 10.1.0.0/16, 10.2.0.0/22 }
|
|
|
24f428 |
+elements = { 10.2.0.0/22, 10.3.0.0/22 }
|
|
|
24f428 |
}
|
|
|
24f428 |
}
|
|
|
24f428 |
])], [
|
|
|
24f428 |
@@ -96,8 +96,8 @@ IPSET_LIST_SET([foobar], 0, [dnl
|
|
|
24f428 |
Name: foobar
|
|
|
24f428 |
Type: hash:net
|
|
|
24f428 |
Members:
|
|
|
24f428 |
-10.1.0.0/16
|
|
|
24f428 |
10.2.0.0/22
|
|
|
24f428 |
+10.3.0.0/22
|
|
|
24f428 |
])])
|
|
|
24f428 |
|
|
|
24f428 |
FWD_END_TEST([-e '/ERROR: COMMAND_FAILED:.*already added.*/d'dnl
|
|
|
24f428 |
--
|
|
|
24f428 |
2.20.1
|
|
|
24f428 |
|