|
 |
8072fb |
From 09b9f5a18dbe01d0d3ab9b0db721eadab5e38b35 Mon Sep 17 00:00:00 2001
|
|
|
8072fb |
From: Vrinda Punj <vpunj@redhat.com>
|
|
|
8072fb |
Date: Mon, 29 Jun 2020 17:34:46 -0400
|
|
|
8072fb |
Subject: [PATCH 37/45] fix(cli): add ipset type hash:mac is incompatible with
|
|
|
8072fb |
the family parameter Fixes: rhbz1541077
|
|
|
8072fb |
|
|
|
8072fb |
(cherry picked from commit dddba7b9c276e9c58f6c2bc554c82252fa084eaf)
|
|
|
8072fb |
(cherry picked from commit 15f5691f0dbffcc1d4c1f42e77e79c6600db0d77)
|
|
|
8072fb |
---
|
|
|
8072fb |
src/firewall-cmd.in | 3 +++
|
|
|
8072fb |
src/firewall-offline-cmd.in | 3 +++
|
|
|
8072fb |
src/tests/regression/regression.at | 1 +
|
|
|
8072fb |
src/tests/regression/rhbz1541077.at | 9 +++++++++
|
|
|
8072fb |
4 files changed, 16 insertions(+)
|
|
|
8072fb |
create mode 100644 src/tests/regression/rhbz1541077.at
|
|
|
8072fb |
|
|
|
8072fb |
diff --git a/src/firewall-cmd.in b/src/firewall-cmd.in
|
|
|
8072fb |
index 014f3884d64b..b6c2f84f5a9e 100755
|
|
|
8072fb |
--- a/src/firewall-cmd.in
|
|
|
8072fb |
+++ b/src/firewall-cmd.in
|
|
|
8072fb |
@@ -1074,6 +1074,9 @@ if a.permanent:
|
|
|
8072fb |
if not a.type:
|
|
|
8072fb |
cmd.fail(parser.format_usage() + "No type specified.")
|
|
|
8072fb |
|
|
|
8072fb |
+ if a.type=='hash:mac' and a.family:
|
|
|
8072fb |
+ cmd.fail(parser.format_usage()+ "--family is not compatible with the hash:mac type")
|
|
|
8072fb |
+
|
|
|
8072fb |
settings = FirewallClientIPSetSettings()
|
|
|
8072fb |
settings.setType(a.type)
|
|
|
8072fb |
if a.option:
|
|
|
8072fb |
diff --git a/src/firewall-offline-cmd.in b/src/firewall-offline-cmd.in
|
|
|
8072fb |
index c0ad9ec8f64e..98c00548e3e5 100755
|
|
|
8072fb |
--- a/src/firewall-offline-cmd.in
|
|
|
8072fb |
+++ b/src/firewall-offline-cmd.in
|
|
|
8072fb |
@@ -1577,6 +1577,9 @@ try:
|
|
|
8072fb |
if not a.type:
|
|
|
8072fb |
cmd.fail(parser.format_usage() + "No type specified.")
|
|
|
8072fb |
|
|
|
8072fb |
+ if a.type=='hash:mac' and a.family:
|
|
|
8072fb |
+ cmd.fail(parser.format_usage() + "--family is not compatible with the hash:mac type")
|
|
|
8072fb |
+
|
|
|
8072fb |
settings = FirewallClientIPSetSettings()
|
|
|
8072fb |
settings.setType(a.type)
|
|
|
8072fb |
if a.option:
|
|
|
8072fb |
diff --git a/src/tests/regression/regression.at b/src/tests/regression/regression.at
|
|
|
8072fb |
index 5241a11a830d..5c8aae7e64d3 100644
|
|
|
8072fb |
--- a/src/tests/regression/regression.at
|
|
|
8072fb |
+++ b/src/tests/regression/regression.at
|
|
|
8072fb |
@@ -32,3 +32,4 @@ m4_include([regression/rhbz1829104.at])
|
|
|
8072fb |
m4_include([regression/rhbz1843398.at])
|
|
|
8072fb |
m4_include([regression/rhbz1689429.at])
|
|
|
8072fb |
m4_include([regression/rhbz1483921.at])
|
|
|
8072fb |
+m4_include([regression/rhbz1541077.at])
|
|
|
8072fb |
diff --git a/src/tests/regression/rhbz1541077.at b/src/tests/regression/rhbz1541077.at
|
|
|
8072fb |
new file mode 100644
|
|
|
8072fb |
index 000000000000..765ab0c6290b
|
|
|
8072fb |
--- /dev/null
|
|
|
8072fb |
+++ b/src/tests/regression/rhbz1541077.at
|
|
|
8072fb |
@@ -0,0 +1,9 @@
|
|
|
8072fb |
+FWD_START_TEST([hash:mac and family mutually exclusive])
|
|
|
8072fb |
+ AT_KEYWORDS(ipset rhbz1541077)
|
|
|
8072fb |
+
|
|
|
8072fb |
+ FWD_CHECK([firewall-cmd --permanent --new-ipset hashmacv6 --type hash:mac --family inet6], 2, ignore,ignore)
|
|
|
8072fb |
+
|
|
|
8072fb |
+ FWD_CHECK([firewall-cmd --new-ipset hashmacv6 --type hash:mac --family inet6], 2, ignore,ignore)
|
|
|
8072fb |
+
|
|
|
8072fb |
+ FWD_CHECK([firewall-offline-cmd --new-ipset hashmacv6 --type hash:mac --family inet6], 2, ignore,ignore)
|
|
|
8072fb |
+FWD_END_TEST
|
|
|
8072fb |
--
|
|
|
8072fb |
2.27.0
|
|
|
8072fb |
|