If VIMAGE is present we can start jails with their own pf instance. This makes it fairly easy to run tests. For example, this basic test verifies that drop/pass and icmp classification works. It's a basic sanity test for pf, and hopefully an example on how to write more pf tests. The tests are skipped if VIMAGE is not enabled. This work is inspired by the GSoC work of Panagiotes Mousikides. Differential Revision: https://reviews.freebsd.org/D12580
755 lines
13 KiB
Plaintext
755 lines
13 KiB
Plaintext
# $FreeBSD$
|
|
#
|
|
# Please see the file src/etc/mtree/README before making changes to this file.
|
|
#
|
|
|
|
/set type=dir uname=root gname=wheel mode=0755
|
|
.
|
|
bin
|
|
cat
|
|
..
|
|
chflags
|
|
..
|
|
chmod
|
|
..
|
|
date
|
|
..
|
|
dd
|
|
..
|
|
echo
|
|
..
|
|
expr
|
|
..
|
|
ln
|
|
..
|
|
ls
|
|
..
|
|
mkdir
|
|
..
|
|
mv
|
|
..
|
|
pax
|
|
..
|
|
pkill
|
|
..
|
|
pwait
|
|
..
|
|
rmdir
|
|
..
|
|
sh
|
|
builtins
|
|
..
|
|
errors
|
|
..
|
|
execution
|
|
..
|
|
expansion
|
|
..
|
|
invocation
|
|
..
|
|
parameters
|
|
..
|
|
parser
|
|
..
|
|
set-e
|
|
..
|
|
..
|
|
sleep
|
|
..
|
|
test
|
|
..
|
|
..
|
|
cddl
|
|
lib
|
|
..
|
|
sbin
|
|
..
|
|
usr.bin
|
|
..
|
|
usr.sbin
|
|
dtrace
|
|
common
|
|
aggs
|
|
..
|
|
arithmetic
|
|
..
|
|
arrays
|
|
..
|
|
assocs
|
|
..
|
|
begin
|
|
..
|
|
bitfields
|
|
..
|
|
buffering
|
|
..
|
|
builtinvar
|
|
..
|
|
cg
|
|
..
|
|
clauses
|
|
..
|
|
cpc
|
|
..
|
|
decls
|
|
..
|
|
drops
|
|
..
|
|
dtraceUtil
|
|
..
|
|
end
|
|
..
|
|
enum
|
|
..
|
|
error
|
|
..
|
|
exit
|
|
..
|
|
fbtprovider
|
|
..
|
|
funcs
|
|
..
|
|
grammar
|
|
..
|
|
include
|
|
..
|
|
inline
|
|
..
|
|
io
|
|
..
|
|
ip
|
|
..
|
|
java_api
|
|
..
|
|
json
|
|
..
|
|
lexer
|
|
..
|
|
llquantize
|
|
..
|
|
mdb
|
|
..
|
|
mib
|
|
..
|
|
misc
|
|
..
|
|
multiaggs
|
|
..
|
|
offsetof
|
|
..
|
|
operators
|
|
..
|
|
pid
|
|
..
|
|
plockstat
|
|
..
|
|
pointers
|
|
..
|
|
pragma
|
|
..
|
|
predicates
|
|
..
|
|
preprocessor
|
|
..
|
|
print
|
|
..
|
|
printa
|
|
..
|
|
printf
|
|
..
|
|
privs
|
|
..
|
|
probes
|
|
..
|
|
proc
|
|
..
|
|
profile-n
|
|
..
|
|
providers
|
|
..
|
|
raise
|
|
..
|
|
rates
|
|
..
|
|
safety
|
|
..
|
|
scalars
|
|
..
|
|
sched
|
|
..
|
|
scripting
|
|
..
|
|
sdt
|
|
..
|
|
sizeof
|
|
..
|
|
speculation
|
|
..
|
|
stability
|
|
..
|
|
stack
|
|
..
|
|
stackdepth
|
|
..
|
|
stop
|
|
..
|
|
strlen
|
|
..
|
|
strtoll
|
|
..
|
|
struct
|
|
..
|
|
sugar
|
|
..
|
|
syscall
|
|
..
|
|
sysevent
|
|
..
|
|
tick-n
|
|
..
|
|
trace
|
|
..
|
|
tracemem
|
|
..
|
|
translators
|
|
..
|
|
typedef
|
|
..
|
|
types
|
|
..
|
|
uctf
|
|
..
|
|
union
|
|
..
|
|
usdt
|
|
..
|
|
ustack
|
|
..
|
|
vars
|
|
..
|
|
version
|
|
..
|
|
..
|
|
..
|
|
zfsd
|
|
..
|
|
..
|
|
..
|
|
etc
|
|
rc.d
|
|
..
|
|
..
|
|
games
|
|
..
|
|
gnu
|
|
lib
|
|
..
|
|
usr.bin
|
|
diff
|
|
..
|
|
..
|
|
..
|
|
lib
|
|
atf
|
|
libatf-c
|
|
detail
|
|
..
|
|
..
|
|
libatf-c++
|
|
detail
|
|
..
|
|
..
|
|
test-programs
|
|
..
|
|
..
|
|
libarchive
|
|
..
|
|
libc
|
|
c063
|
|
..
|
|
db
|
|
..
|
|
gen
|
|
execve
|
|
..
|
|
posix_spawn
|
|
..
|
|
..
|
|
hash
|
|
data
|
|
..
|
|
..
|
|
iconv
|
|
..
|
|
inet
|
|
..
|
|
locale
|
|
..
|
|
net
|
|
getaddrinfo
|
|
data
|
|
..
|
|
..
|
|
..
|
|
nss
|
|
..
|
|
regex
|
|
data
|
|
..
|
|
..
|
|
resolv
|
|
..
|
|
rpc
|
|
..
|
|
ssp
|
|
..
|
|
setjmp
|
|
..
|
|
stdio
|
|
..
|
|
stdlib
|
|
..
|
|
string
|
|
..
|
|
sys
|
|
..
|
|
time
|
|
..
|
|
tls
|
|
dso
|
|
..
|
|
..
|
|
termios
|
|
..
|
|
ttyio
|
|
..
|
|
..
|
|
libcam
|
|
..
|
|
libcasper
|
|
services
|
|
cap_dns
|
|
..
|
|
cap_grp
|
|
..
|
|
cap_pwd
|
|
..
|
|
cap_sysctl
|
|
..
|
|
..
|
|
..
|
|
libcrypt
|
|
..
|
|
libdevdctl
|
|
..
|
|
libkvm
|
|
..
|
|
libmp
|
|
..
|
|
libnv
|
|
..
|
|
libproc
|
|
..
|
|
librt
|
|
..
|
|
libsbuf
|
|
..
|
|
libthr
|
|
dlopen
|
|
..
|
|
..
|
|
libutil
|
|
..
|
|
libxo
|
|
..
|
|
msun
|
|
..
|
|
..
|
|
libexec
|
|
atf
|
|
atf-check
|
|
..
|
|
atf-sh
|
|
..
|
|
..
|
|
rtld-elf
|
|
..
|
|
..
|
|
sbin
|
|
dhclient
|
|
..
|
|
devd
|
|
..
|
|
growfs
|
|
..
|
|
ifconfig
|
|
..
|
|
mdconfig
|
|
..
|
|
pfctl
|
|
files
|
|
..
|
|
..
|
|
..
|
|
secure
|
|
lib
|
|
..
|
|
libexec
|
|
..
|
|
usr.bin
|
|
..
|
|
usr.sbin
|
|
..
|
|
..
|
|
share
|
|
examples
|
|
tests
|
|
atf
|
|
..
|
|
plain
|
|
..
|
|
tap
|
|
..
|
|
..
|
|
..
|
|
zoneinfo
|
|
..
|
|
..
|
|
sys
|
|
acl
|
|
..
|
|
aio
|
|
..
|
|
fifo
|
|
..
|
|
file
|
|
..
|
|
fs
|
|
tmpfs
|
|
..
|
|
..
|
|
geom
|
|
class
|
|
concat
|
|
..
|
|
eli
|
|
..
|
|
gate
|
|
..
|
|
gpt
|
|
..
|
|
mirror
|
|
..
|
|
nop
|
|
..
|
|
raid3
|
|
..
|
|
shsec
|
|
..
|
|
stripe
|
|
..
|
|
uzip
|
|
etalon
|
|
..
|
|
..
|
|
..
|
|
..
|
|
kern
|
|
acct
|
|
..
|
|
execve
|
|
..
|
|
pipe
|
|
..
|
|
..
|
|
kqueue
|
|
libkqueue
|
|
..
|
|
..
|
|
mac
|
|
bsdextended
|
|
..
|
|
portacl
|
|
..
|
|
..
|
|
mqueue
|
|
..
|
|
netinet
|
|
..
|
|
netpfil
|
|
pf
|
|
..
|
|
..
|
|
opencrypto
|
|
..
|
|
pjdfstest
|
|
chflags
|
|
..
|
|
chmod
|
|
..
|
|
chown
|
|
..
|
|
ftruncate
|
|
..
|
|
granular
|
|
..
|
|
link
|
|
..
|
|
mkdir
|
|
..
|
|
mkfifo
|
|
..
|
|
mknod
|
|
..
|
|
open
|
|
..
|
|
rename
|
|
..
|
|
rmdir
|
|
..
|
|
symlink
|
|
..
|
|
truncate
|
|
..
|
|
unlink
|
|
..
|
|
utimensat
|
|
..
|
|
..
|
|
posixshm
|
|
..
|
|
sys
|
|
..
|
|
vfs
|
|
..
|
|
vm
|
|
..
|
|
..
|
|
usr.bin
|
|
apply
|
|
..
|
|
basename
|
|
..
|
|
bmake
|
|
archives
|
|
fmt_44bsd
|
|
..
|
|
fmt_44bsd_mod
|
|
..
|
|
fmt_oldbsd
|
|
..
|
|
..
|
|
basic
|
|
t0
|
|
..
|
|
t1
|
|
..
|
|
t2
|
|
..
|
|
t3
|
|
..
|
|
..
|
|
execution
|
|
ellipsis
|
|
..
|
|
empty
|
|
..
|
|
joberr
|
|
..
|
|
plus
|
|
..
|
|
..
|
|
shell
|
|
builtin
|
|
..
|
|
meta
|
|
..
|
|
path
|
|
..
|
|
path_select
|
|
..
|
|
replace
|
|
..
|
|
select
|
|
..
|
|
..
|
|
suffixes
|
|
basic
|
|
..
|
|
src_wild1
|
|
..
|
|
src_wild2
|
|
..
|
|
..
|
|
syntax
|
|
directive-t0
|
|
..
|
|
enl
|
|
..
|
|
funny-targets
|
|
..
|
|
semi
|
|
..
|
|
..
|
|
sysmk
|
|
t0
|
|
2
|
|
1
|
|
..
|
|
..
|
|
mk
|
|
..
|
|
..
|
|
t1
|
|
2
|
|
1
|
|
..
|
|
..
|
|
mk
|
|
..
|
|
..
|
|
t2
|
|
2
|
|
1
|
|
..
|
|
..
|
|
mk
|
|
..
|
|
..
|
|
..
|
|
variables
|
|
modifier_M
|
|
..
|
|
modifier_t
|
|
..
|
|
opt_V
|
|
..
|
|
t0
|
|
..
|
|
..
|
|
..
|
|
bsdcat
|
|
..
|
|
calendar
|
|
..
|
|
cmp
|
|
..
|
|
compress
|
|
..
|
|
cpio
|
|
..
|
|
col
|
|
..
|
|
comm
|
|
..
|
|
csplit
|
|
..
|
|
cut
|
|
..
|
|
diff
|
|
..
|
|
dirname
|
|
..
|
|
du
|
|
..
|
|
file2c
|
|
..
|
|
getconf
|
|
..
|
|
grep
|
|
..
|
|
gzip
|
|
..
|
|
hexdump
|
|
..
|
|
ident
|
|
..
|
|
indent
|
|
..
|
|
join
|
|
..
|
|
jot
|
|
..
|
|
lastcomm
|
|
..
|
|
limits
|
|
..
|
|
m4
|
|
..
|
|
mkimg
|
|
..
|
|
ncal
|
|
..
|
|
opensm
|
|
..
|
|
pr
|
|
..
|
|
printf
|
|
..
|
|
procstat
|
|
..
|
|
sdiff
|
|
..
|
|
sed
|
|
regress.multitest.out
|
|
..
|
|
..
|
|
soelim
|
|
..
|
|
stat
|
|
..
|
|
tail
|
|
..
|
|
tar
|
|
..
|
|
timeout
|
|
..
|
|
tr
|
|
..
|
|
truncate
|
|
..
|
|
units
|
|
..
|
|
uudecode
|
|
..
|
|
uuencode
|
|
..
|
|
uniq
|
|
..
|
|
xargs
|
|
..
|
|
xinstall
|
|
..
|
|
xo
|
|
..
|
|
yacc
|
|
yacc
|
|
..
|
|
..
|
|
..
|
|
usr.sbin
|
|
chown
|
|
..
|
|
etcupdate
|
|
..
|
|
extattr
|
|
..
|
|
fstyp
|
|
..
|
|
makefs
|
|
..
|
|
newsyslog
|
|
..
|
|
nmtree
|
|
..
|
|
pw
|
|
..
|
|
rpcbind
|
|
..
|
|
sa
|
|
..
|
|
..
|
|
..
|
|
|
|
# vim: set expandtab ts=4 sw=4:
|