diff --git a/src/tests/dbus/firewalld.conf.at b/src/tests/dbus/firewalld.conf.at index 1c95795..14d8776 100644 --- a/src/tests/dbus/firewalld.conf.at +++ b/src/tests/dbus/firewalld.conf.at @@ -7,6 +7,12 @@ IF_HOST_SUPPORTS_NFT_FIB([ EXPECTED_IPV6_RPFILTER_VALUE=no ]) +IF_HOST_SUPPORTS_NFT_RULE_INDEX([ + EXPECTED_INDIVIDUAL_CALLS_VALUE=no +], [ + EXPECTED_INDIVIDUAL_CALLS_VALUE=yes +]) + dnl Verify defaults over dbus. Should be inline with default firewalld.conf. DBUS_GETALL([config], [config], 0, [dnl string "AllowZoneDrifting" : variant string "yes" @@ -16,7 +22,7 @@ string "DefaultZone" : variant string "public" string "FirewallBackend" : variant string "nftables" string "FlushAllOnReload" : variant string "yes" string "IPv6_rpfilter" : variant string m4_escape(["${EXPECTED_IPV6_RPFILTER_VALUE}"]) -string "IndividualCalls" : variant string "no" +string "IndividualCalls" : variant string m4_escape(["${EXPECTED_INDIVIDUAL_CALLS_VALUE}"]) string "Lockdown" : variant string "no" string "LogDenied" : variant string "off" string "MinimalMark" : variant int32 100 diff --git a/src/tests/functions.at b/src/tests/functions.at index f837205..1cde499 100644 --- a/src/tests/functions.at +++ b/src/tests/functions.at @@ -221,6 +221,10 @@ m4_define([FWD_START_TEST], [ fi echo "kill $DBUS_PID" >> ./cleanup_late + IF_HOST_SUPPORTS_NFT_RULE_INDEX([], [ + AT_CHECK([sed -i 's/^IndividualCalls.*/IndividualCalls=yes/' ./firewalld.conf]) + ]) + FWD_START_FIREWALLD ]) ])