/usr/share/augeas/lenses/dist/tests/test_lokkit.aug is in augeas-lenses 1.2.0-0ubuntu1.3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 | module Test_lokkit =
let conf = "# Configuration file for system-config-firewall
--enabled
--port=111:tcp
-p 111:udp
-p 2020-2049:tcp
--port=5900-5910:tcp
--custom-rules=ipv4:filter:/var/lib/misc/iptables-forward-bridged
-s dns
--service=ssh
--trust=trust1
--masq=eth42
--block-icmp=5
-t trust0
--addmodule=fancy
--removemodule=broken
--forward-port=if=forw0:port=42:proto=tcp:toport=42:toaddr=192.168.0.42
--selinux=permissive
"
test Lokkit.lns get conf =
{ "#comment" = "Configuration file for system-config-firewall" }
{ }
{ "enabled" }
{ "port"
{ "start" = "111" }
{ "protocol" = "tcp" } }
{ "port"
{ "start" = "111" }
{ "protocol" = "udp" } }
{ "port"
{ "start" = "2020" }
{ "end" = "2049" }
{ "protocol" = "tcp" } }
{ "port"
{ "start" = "5900" }
{ "end" = "5910" }
{ "protocol" = "tcp" } }
{ "custom-rules" = "/var/lib/misc/iptables-forward-bridged"
{ "type" = "ipv4" }
{ "table" = "filter" } }
{ "service" = "dns" }
{ "service" = "ssh" }
{ "trust" = "trust1" }
{ "masq" = "eth42" }
{ "block-icmp" = "5" }
{ "trust" = "trust0" }
{ "addmodule" = "fancy" }
{ "removemodule" = "broken" }
{ "forward-port"
{ "if" = "forw0" }
{ "port" = "42" }
{ "proto" = "tcp" }
{ "toport" = "42" }
{ "toaddr" = "192.168.0.42" } }
{ "selinux" = "permissive" }
test Lokkit.custom_rules get
"--custom-rules=ipv4:filter:/some/file\n" =
{ "custom-rules" = "/some/file"
{ "type" = "ipv4" }
{ "table" = "filter" } }
test Lokkit.custom_rules get
"--custom-rules=filter:/some/file\n" =
{ "custom-rules" = "/some/file"
{ "table" = "filter" } }
test Lokkit.custom_rules get
"--custom-rules=ipv4:/some/file\n" =
{ "custom-rules" = "/some/file"
{ "type" = "ipv4" } }
test Lokkit.custom_rules get
"--custom-rules=/some/file\n" =
{ "custom-rules" = "/some/file" }
test Lokkit.lns get
"--trust=tun+\n--trust=eth0.42\n--trust=eth0:1\n" =
{ "trust" = "tun+" }
{ "trust" = "eth0.42" }
{ "trust" = "eth0:1" }
(* We didn't allow '-' in the service name *)
test Lokkit.lns get "--service=samba-client\n" =
{ "service" = "samba-client" }
|