Commit 2e2d9c7d authored by Phil Sutter's avatar Phil Sutter Committed by Florian Westphal
Browse files

selftests: netfilter: Run nft_audit.sh in its own netns 



Don't mess with the host's firewall ruleset. Since audit logging is not
per-netns, add an initial delay of a second so other selftests' netns
cleanups have a chance to finish.

Fixes: e8dbde59 ("selftests: netfilter: Test nf_tables audit logging")
Signed-off-by: default avatarPhil Sutter <phil@nwl.cc>
Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
parent 1baf0152

tools/testing/selftests/netfilter/nft_audit.sh

+6 −0
Original line number Diff line number Diff line
@@ -11,6 +11,12 @@ nft --version >/dev/null 2>&1 || { 
	exit $SKIP_RC

}



# Run everything in a separate network namespace

[ "${1}" != "run" ] && { unshare -n "${0}" run; exit $?; }



# give other scripts a chance to finish - audit_logread sees all activity

sleep 1



logfile=$(mktemp)

rulefile=$(mktemp)

echo "logging into $logfile"