This file is indexed.

/usr/share/augeas/lenses/dist/tests/test_lokkit.aug is in augeas-lenses 1.2.0-0ubuntu1.3.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
module Test_lokkit =

let conf = "# Configuration file for system-config-firewall

--enabled
--port=111:tcp
-p 111:udp
-p 2020-2049:tcp
--port=5900-5910:tcp
--custom-rules=ipv4:filter:/var/lib/misc/iptables-forward-bridged
-s dns
--service=ssh
--trust=trust1
--masq=eth42
--block-icmp=5
-t trust0
--addmodule=fancy
--removemodule=broken
--forward-port=if=forw0:port=42:proto=tcp:toport=42:toaddr=192.168.0.42
--selinux=permissive
"

test Lokkit.lns get conf =
  { "#comment" = "Configuration file for system-config-firewall" }
  { }
  { "enabled" }
  { "port"
    { "start" = "111" }
    { "protocol" = "tcp" } }
  { "port"
    { "start" = "111" }
    { "protocol" = "udp" } }
  { "port"
    { "start" = "2020" }
    { "end" = "2049" }
    { "protocol" = "tcp" } }
  { "port"
    { "start" = "5900" }
    { "end" = "5910" }
    { "protocol" = "tcp" } }
  { "custom-rules" = "/var/lib/misc/iptables-forward-bridged"
    { "type" = "ipv4" }
    { "table" = "filter" } }
  { "service" = "dns" }
  { "service" = "ssh" }
  { "trust" = "trust1" }
  { "masq" = "eth42" }
  { "block-icmp" = "5" }
  { "trust" = "trust0" }
  { "addmodule" = "fancy" }
  { "removemodule" = "broken" }
  { "forward-port"
    { "if" = "forw0" }
    { "port" = "42" }
    { "proto" = "tcp" }
    { "toport" = "42" }
    { "toaddr" = "192.168.0.42" } }
  { "selinux" = "permissive" }

test Lokkit.custom_rules get
"--custom-rules=ipv4:filter:/some/file\n" =
  { "custom-rules" = "/some/file"
    { "type" = "ipv4" }
    { "table" = "filter" } }

test Lokkit.custom_rules get
"--custom-rules=filter:/some/file\n" =
  { "custom-rules" = "/some/file"
    { "table" = "filter" } }

test Lokkit.custom_rules get
"--custom-rules=ipv4:/some/file\n" =
  { "custom-rules" = "/some/file"
    { "type" = "ipv4" } }

test Lokkit.custom_rules get
"--custom-rules=/some/file\n" =
  { "custom-rules" = "/some/file" }

test Lokkit.lns get
"--trust=tun+\n--trust=eth0.42\n--trust=eth0:1\n" =
  { "trust" = "tun+" }
  { "trust" = "eth0.42" }
  { "trust" = "eth0:1" }

(* We didn't allow '-' in the service name *)
test Lokkit.lns get "--service=samba-client\n" =
  { "service" = "samba-client" }