mirror of
https://github.com/inspec/inspec
synced 2025-02-18 15:08:44 +00:00
4fce6845e5
* Fix systemd path for Leap image
* Use vhef client version 17 as doocker cookbook do not support >= 18
* Add nftables resource
* Add nftables tests
* Add fixtures for nftables tests
* enable nftables only when attr is true - then disable iptables
* By default test iptables, not nftables
* Fix tests and lint errors
* Increase unit test coverage for nftables
* Do not use -nn nft option as behaviour changes based on nft version
* Base nft params identification on its version, not os version
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Make test more human friendly by reversing unless/if logic
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Update mocked cmds with nft params
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
* Fix quoting issue with rubocop
* Fix uninitiallized class vars
* Fix unit test by adding nft version mocking
* Clean nftables doc
---------
Signed-off-by: Jeremy JACQUE <jeremy.jacque@algolia.com>
Co-authored-by: jjacque <jeremy.jacque@algolia.com>
7 lines
174 B
Text
7 lines
174 B
Text
table inet filter {
|
|
chain INPUT {
|
|
type filter hook input priority 0; policy accept;
|
|
iifname "eth0" tcp dport 80 accept comment "http on 80"
|
|
jump derby-cognos-web
|
|
}
|
|
}
|