f97a8a3615
Add a common test suite for the firewalls included in the base system. The test suite allows common test infrastructure to test pf, ipfw and ipf firewalls from test files containing the setup for all three firewalls. Add the pass block test for pf, ipfw and ipf. The pass block test checks the allow/deny functionality of the firewalls tested. Submitted by: Ahsan Barkati Sponsored by: Google, Inc. (GSoC 2019) Reviewed by: kp Approved by: bz (co-mentor) MFC after: 2 weeks Differential Revision: https://reviews.freebsd.org/D21065
1093 lines
21 KiB
Plaintext
1093 lines
21 KiB
Plaintext
# $FreeBSD$
|
|
#
|
|
# Please see the file src/etc/mtree/README before making changes to this file.
|
|
#
|
|
|
|
/set type=dir uname=root gname=wheel mode=0755
|
|
.
|
|
bin
|
|
cat
|
|
..
|
|
chflags
|
|
..
|
|
chmod
|
|
..
|
|
date
|
|
..
|
|
dd
|
|
..
|
|
echo
|
|
..
|
|
expr
|
|
..
|
|
ln
|
|
..
|
|
ls
|
|
..
|
|
mkdir
|
|
..
|
|
mv
|
|
..
|
|
pax
|
|
..
|
|
pkill
|
|
..
|
|
pwait
|
|
..
|
|
rm
|
|
..
|
|
rmdir
|
|
..
|
|
sh
|
|
builtins
|
|
..
|
|
errors
|
|
..
|
|
execution
|
|
..
|
|
expansion
|
|
..
|
|
invocation
|
|
..
|
|
parameters
|
|
..
|
|
parser
|
|
..
|
|
set-e
|
|
..
|
|
..
|
|
sleep
|
|
..
|
|
test
|
|
..
|
|
..
|
|
cddl
|
|
lib
|
|
..
|
|
sbin
|
|
..
|
|
usr.bin
|
|
ctfconvert
|
|
..
|
|
ztest
|
|
..
|
|
..
|
|
usr.sbin
|
|
dtrace
|
|
common
|
|
aggs
|
|
..
|
|
arithmetic
|
|
..
|
|
arrays
|
|
..
|
|
assocs
|
|
..
|
|
begin
|
|
..
|
|
bitfields
|
|
..
|
|
buffering
|
|
..
|
|
builtinvar
|
|
..
|
|
cg
|
|
..
|
|
clauses
|
|
..
|
|
cpc
|
|
..
|
|
decls
|
|
..
|
|
drops
|
|
..
|
|
dtraceUtil
|
|
..
|
|
end
|
|
..
|
|
env
|
|
..
|
|
enum
|
|
..
|
|
error
|
|
..
|
|
exit
|
|
..
|
|
fbtprovider
|
|
..
|
|
funcs
|
|
..
|
|
grammar
|
|
..
|
|
include
|
|
..
|
|
inline
|
|
..
|
|
io
|
|
..
|
|
ip
|
|
..
|
|
java_api
|
|
..
|
|
json
|
|
..
|
|
lexer
|
|
..
|
|
llquantize
|
|
..
|
|
mdb
|
|
..
|
|
mib
|
|
..
|
|
misc
|
|
..
|
|
multiaggs
|
|
..
|
|
offsetof
|
|
..
|
|
operators
|
|
..
|
|
pid
|
|
..
|
|
plockstat
|
|
..
|
|
pointers
|
|
..
|
|
pragma
|
|
..
|
|
predicates
|
|
..
|
|
preprocessor
|
|
..
|
|
print
|
|
..
|
|
printa
|
|
..
|
|
printf
|
|
..
|
|
privs
|
|
..
|
|
probes
|
|
..
|
|
proc
|
|
..
|
|
profile-n
|
|
..
|
|
providers
|
|
..
|
|
raise
|
|
..
|
|
rates
|
|
..
|
|
safety
|
|
..
|
|
scalars
|
|
..
|
|
sched
|
|
..
|
|
scripting
|
|
..
|
|
sdt
|
|
..
|
|
sizeof
|
|
..
|
|
speculation
|
|
..
|
|
stability
|
|
..
|
|
stack
|
|
..
|
|
stackdepth
|
|
..
|
|
stop
|
|
..
|
|
strlen
|
|
..
|
|
strtoll
|
|
..
|
|
struct
|
|
..
|
|
sugar
|
|
..
|
|
syscall
|
|
..
|
|
sysevent
|
|
..
|
|
tick-n
|
|
..
|
|
trace
|
|
..
|
|
tracemem
|
|
..
|
|
translators
|
|
..
|
|
typedef
|
|
..
|
|
types
|
|
..
|
|
uctf
|
|
..
|
|
union
|
|
..
|
|
usdt
|
|
..
|
|
ustack
|
|
..
|
|
vars
|
|
..
|
|
version
|
|
..
|
|
..
|
|
i386
|
|
arrays
|
|
..
|
|
funcs
|
|
..
|
|
pid
|
|
..
|
|
ustack
|
|
..
|
|
..
|
|
amd64
|
|
arrays
|
|
..
|
|
..
|
|
..
|
|
zfsd
|
|
..
|
|
..
|
|
..
|
|
etc
|
|
rc.d
|
|
..
|
|
..
|
|
games
|
|
..
|
|
gnu
|
|
lib
|
|
..
|
|
usr.bin
|
|
diff
|
|
..
|
|
..
|
|
..
|
|
lib
|
|
atf
|
|
libatf-c
|
|
detail
|
|
..
|
|
..
|
|
libatf-c++
|
|
detail
|
|
..
|
|
..
|
|
test-programs
|
|
..
|
|
..
|
|
csu
|
|
dynamic
|
|
..
|
|
dynamiclib
|
|
..
|
|
static
|
|
..
|
|
..
|
|
googletest
|
|
gmock
|
|
..
|
|
gmock_main
|
|
..
|
|
gtest
|
|
..
|
|
gtest_main
|
|
..
|
|
..
|
|
libarchive
|
|
..
|
|
libbe
|
|
..
|
|
libc
|
|
c063
|
|
..
|
|
db
|
|
..
|
|
gen
|
|
execve
|
|
..
|
|
posix_spawn
|
|
..
|
|
..
|
|
hash
|
|
data
|
|
..
|
|
..
|
|
iconv
|
|
..
|
|
inet
|
|
..
|
|
locale
|
|
..
|
|
net
|
|
getaddrinfo
|
|
data
|
|
..
|
|
..
|
|
..
|
|
nss
|
|
..
|
|
regex
|
|
data
|
|
..
|
|
..
|
|
resolv
|
|
..
|
|
rpc
|
|
..
|
|
ssp
|
|
..
|
|
setjmp
|
|
..
|
|
stdio
|
|
..
|
|
stdlib
|
|
..
|
|
string
|
|
..
|
|
sys
|
|
..
|
|
time
|
|
..
|
|
tls
|
|
dso
|
|
..
|
|
..
|
|
termios
|
|
..
|
|
ttyio
|
|
..
|
|
..
|
|
libcam
|
|
..
|
|
libcasper
|
|
services
|
|
cap_dns
|
|
..
|
|
cap_grp
|
|
..
|
|
cap_pwd
|
|
..
|
|
cap_sysctl
|
|
..
|
|
..
|
|
..
|
|
libcrypt
|
|
..
|
|
libdevdctl
|
|
..
|
|
libkvm
|
|
..
|
|
libmp
|
|
..
|
|
libnv
|
|
..
|
|
libproc
|
|
..
|
|
libregex
|
|
data
|
|
..
|
|
..
|
|
librt
|
|
..
|
|
libsbuf
|
|
..
|
|
libthr
|
|
dlopen
|
|
..
|
|
..
|
|
libutil
|
|
..
|
|
libxo
|
|
..
|
|
msun
|
|
..
|
|
..
|
|
libexec
|
|
atf
|
|
atf-check
|
|
..
|
|
atf-sh
|
|
..
|
|
..
|
|
rtld-elf
|
|
..
|
|
tftpd
|
|
..
|
|
..
|
|
sbin
|
|
bectl
|
|
..
|
|
dhclient
|
|
..
|
|
devd
|
|
..
|
|
growfs
|
|
..
|
|
ifconfig
|
|
..
|
|
mdconfig
|
|
..
|
|
pfctl
|
|
files
|
|
..
|
|
..
|
|
..
|
|
secure
|
|
lib
|
|
..
|
|
libexec
|
|
..
|
|
usr.bin
|
|
..
|
|
usr.sbin
|
|
..
|
|
..
|
|
share
|
|
examples
|
|
tests
|
|
atf
|
|
..
|
|
googletest
|
|
..
|
|
plain
|
|
..
|
|
tap
|
|
..
|
|
..
|
|
..
|
|
zoneinfo
|
|
..
|
|
..
|
|
sys
|
|
acl
|
|
..
|
|
aio
|
|
..
|
|
audit
|
|
..
|
|
auditpipe
|
|
..
|
|
capsicum
|
|
..
|
|
cddl
|
|
zfs
|
|
bin
|
|
..
|
|
include
|
|
..
|
|
tests
|
|
acl
|
|
cifs
|
|
..
|
|
nontrivial
|
|
..
|
|
trivial
|
|
..
|
|
..
|
|
atime
|
|
..
|
|
bootfs
|
|
..
|
|
cache
|
|
..
|
|
cachefile
|
|
..
|
|
clean_mirror
|
|
..
|
|
cli_root
|
|
zfs_upgrade
|
|
..
|
|
zfs_promote
|
|
..
|
|
zfs_clone
|
|
..
|
|
zfs_property
|
|
..
|
|
zfs_destroy
|
|
..
|
|
zpool_create
|
|
..
|
|
zpool_history
|
|
..
|
|
zpool_expand
|
|
..
|
|
zpool_remove
|
|
..
|
|
zfs_mount
|
|
..
|
|
zfs_unshare
|
|
..
|
|
zdb
|
|
..
|
|
zpool_online
|
|
..
|
|
zpool_get
|
|
..
|
|
zpool_export
|
|
..
|
|
zfs_copies
|
|
..
|
|
zfs_get
|
|
..
|
|
zfs
|
|
..
|
|
zpool_clear
|
|
..
|
|
zpool_import
|
|
blockfiles
|
|
..
|
|
..
|
|
zpool
|
|
..
|
|
zpool_offline
|
|
..
|
|
zpool_replace
|
|
..
|
|
zfs_rollback
|
|
..
|
|
zpool_set
|
|
..
|
|
zfs_send
|
|
..
|
|
zfs_set
|
|
..
|
|
zpool_detach
|
|
..
|
|
zfs_diff
|
|
..
|
|
zpool_scrub
|
|
..
|
|
zfs_inherit
|
|
..
|
|
zfs_snapshot
|
|
..
|
|
zfs_share
|
|
..
|
|
zpool_destroy
|
|
..
|
|
zpool_status
|
|
..
|
|
zfs_unmount
|
|
..
|
|
zfs_receive
|
|
..
|
|
zfs_create
|
|
..
|
|
zpool_upgrade
|
|
blockfiles
|
|
..
|
|
..
|
|
zpool_add
|
|
..
|
|
zfs_rename
|
|
..
|
|
zpool_attach
|
|
..
|
|
zfs_reservation
|
|
..
|
|
..
|
|
cli_user
|
|
misc
|
|
..
|
|
zfs_list
|
|
..
|
|
zpool_iostat
|
|
..
|
|
zpool_list
|
|
..
|
|
..
|
|
compression
|
|
..
|
|
ctime
|
|
..
|
|
delegate
|
|
..
|
|
devices
|
|
..
|
|
exec
|
|
..
|
|
grow_pool
|
|
..
|
|
grow_replicas
|
|
..
|
|
history
|
|
..
|
|
hotplug
|
|
..
|
|
hotspare
|
|
..
|
|
inheritance
|
|
..
|
|
interop
|
|
..
|
|
inuse
|
|
..
|
|
iscsi
|
|
..
|
|
large_files
|
|
..
|
|
largest_pool
|
|
..
|
|
link_count
|
|
..
|
|
migration
|
|
..
|
|
mmap
|
|
..
|
|
mount
|
|
..
|
|
mv_files
|
|
..
|
|
nestedfs
|
|
..
|
|
no_space
|
|
..
|
|
online_offline
|
|
..
|
|
pool_names
|
|
..
|
|
poolversion
|
|
..
|
|
quota
|
|
..
|
|
redundancy
|
|
..
|
|
refquota
|
|
..
|
|
refreserv
|
|
..
|
|
rename_dirs
|
|
..
|
|
replacement
|
|
..
|
|
reservation
|
|
..
|
|
rootpool
|
|
..
|
|
rsend
|
|
..
|
|
scrub_mirror
|
|
..
|
|
slog
|
|
..
|
|
snapshot
|
|
..
|
|
snapused
|
|
..
|
|
sparse
|
|
..
|
|
threadsappend
|
|
..
|
|
truncate
|
|
..
|
|
txg_integrity
|
|
..
|
|
userquota
|
|
..
|
|
utils_test
|
|
..
|
|
write_dirs
|
|
..
|
|
xattr
|
|
..
|
|
zfsd
|
|
..
|
|
zil
|
|
..
|
|
zinject
|
|
..
|
|
zones
|
|
..
|
|
zvol
|
|
zvol_ENOSPC
|
|
..
|
|
zvol_cli
|
|
..
|
|
zvol_misc
|
|
..
|
|
zvol_swap
|
|
..
|
|
..
|
|
zvol_thrash
|
|
..
|
|
..
|
|
..
|
|
..
|
|
devrandom
|
|
..
|
|
dtrace
|
|
..
|
|
fifo
|
|
..
|
|
file
|
|
..
|
|
fs
|
|
tmpfs
|
|
..
|
|
..
|
|
geom
|
|
class
|
|
concat
|
|
..
|
|
eli
|
|
..
|
|
gate
|
|
..
|
|
gpt
|
|
..
|
|
mirror
|
|
..
|
|
nop
|
|
..
|
|
part
|
|
..
|
|
raid3
|
|
..
|
|
shsec
|
|
..
|
|
stripe
|
|
..
|
|
uzip
|
|
etalon
|
|
..
|
|
..
|
|
..
|
|
..
|
|
kern
|
|
acct
|
|
..
|
|
execve
|
|
..
|
|
pipe
|
|
..
|
|
..
|
|
kqueue
|
|
libkqueue
|
|
..
|
|
..
|
|
mac
|
|
bsdextended
|
|
..
|
|
portacl
|
|
..
|
|
..
|
|
mqueue
|
|
..
|
|
net
|
|
..
|
|
netinet
|
|
..
|
|
netipsec
|
|
tunnel
|
|
..
|
|
..
|
|
netmap
|
|
..
|
|
netpfil
|
|
common
|
|
..
|
|
pf
|
|
ioctl
|
|
..
|
|
..
|
|
..
|
|
opencrypto
|
|
..
|
|
pjdfstest
|
|
chflags
|
|
..
|
|
chmod
|
|
..
|
|
chown
|
|
..
|
|
ftruncate
|
|
..
|
|
granular
|
|
..
|
|
link
|
|
..
|
|
mkdir
|
|
..
|
|
mkfifo
|
|
..
|
|
mknod
|
|
..
|
|
open
|
|
..
|
|
rename
|
|
..
|
|
rmdir
|
|
..
|
|
symlink
|
|
..
|
|
truncate
|
|
..
|
|
unlink
|
|
..
|
|
utimensat
|
|
..
|
|
..
|
|
posixshm
|
|
..
|
|
sys
|
|
..
|
|
vfs
|
|
..
|
|
vm
|
|
..
|
|
..
|
|
usr.bin
|
|
apply
|
|
..
|
|
awk
|
|
..
|
|
basename
|
|
..
|
|
bmake
|
|
archives
|
|
fmt_44bsd
|
|
..
|
|
fmt_44bsd_mod
|
|
..
|
|
fmt_oldbsd
|
|
..
|
|
..
|
|
basic
|
|
t0
|
|
..
|
|
t1
|
|
..
|
|
t2
|
|
..
|
|
t3
|
|
..
|
|
..
|
|
execution
|
|
ellipsis
|
|
..
|
|
empty
|
|
..
|
|
joberr
|
|
..
|
|
plus
|
|
..
|
|
..
|
|
shell
|
|
builtin
|
|
..
|
|
meta
|
|
..
|
|
path
|
|
..
|
|
path_select
|
|
..
|
|
replace
|
|
..
|
|
select
|
|
..
|
|
..
|
|
suffixes
|
|
basic
|
|
..
|
|
src_wild1
|
|
..
|
|
src_wild2
|
|
..
|
|
..
|
|
syntax
|
|
directive-t0
|
|
..
|
|
enl
|
|
..
|
|
funny-targets
|
|
..
|
|
semi
|
|
..
|
|
..
|
|
sysmk
|
|
t0
|
|
2
|
|
1
|
|
..
|
|
..
|
|
mk
|
|
..
|
|
..
|
|
t1
|
|
2
|
|
1
|
|
..
|
|
..
|
|
mk
|
|
..
|
|
..
|
|
t2
|
|
2
|
|
1
|
|
..
|
|
..
|
|
mk
|
|
..
|
|
..
|
|
..
|
|
variables
|
|
modifier_M
|
|
..
|
|
modifier_t
|
|
..
|
|
opt_V
|
|
..
|
|
t0
|
|
..
|
|
..
|
|
..
|
|
bsdcat
|
|
..
|
|
calendar
|
|
..
|
|
cmp
|
|
..
|
|
compress
|
|
..
|
|
cpio
|
|
..
|
|
col
|
|
..
|
|
comm
|
|
..
|
|
csplit
|
|
..
|
|
cut
|
|
..
|
|
dc
|
|
..
|
|
diff
|
|
..
|
|
dirname
|
|
..
|
|
du
|
|
..
|
|
file2c
|
|
..
|
|
find
|
|
..
|
|
fold
|
|
..
|
|
getconf
|
|
..
|
|
grep
|
|
..
|
|
gzip
|
|
..
|
|
head
|
|
..
|
|
hexdump
|
|
..
|
|
ident
|
|
..
|
|
indent
|
|
..
|
|
join
|
|
..
|
|
jot
|
|
..
|
|
lastcomm
|
|
..
|
|
limits
|
|
..
|
|
m4
|
|
..
|
|
mkimg
|
|
..
|
|
ncal
|
|
..
|
|
opensm
|
|
..
|
|
pr
|
|
..
|
|
printf
|
|
..
|
|
procstat
|
|
..
|
|
rs
|
|
..
|
|
sdiff
|
|
..
|
|
sed
|
|
regress.multitest.out
|
|
..
|
|
..
|
|
seq
|
|
..
|
|
soelim
|
|
..
|
|
stat
|
|
..
|
|
tail
|
|
..
|
|
tar
|
|
..
|
|
timeout
|
|
..
|
|
tr
|
|
..
|
|
truncate
|
|
..
|
|
units
|
|
..
|
|
uudecode
|
|
..
|
|
uuencode
|
|
..
|
|
uniq
|
|
..
|
|
vmstat
|
|
..
|
|
xargs
|
|
..
|
|
xinstall
|
|
..
|
|
xo
|
|
..
|
|
yacc
|
|
yacc
|
|
..
|
|
..
|
|
..
|
|
usr.sbin
|
|
chown
|
|
..
|
|
etcupdate
|
|
..
|
|
extattr
|
|
..
|
|
fstyp
|
|
..
|
|
makefs
|
|
..
|
|
newsyslog
|
|
..
|
|
nmtree
|
|
..
|
|
praudit
|
|
..
|
|
pw
|
|
..
|
|
rpcbind
|
|
..
|
|
sa
|
|
..
|
|
..
|
|
..
|
|
|
|
# vim: set expandtab ts=4 sw=4:
|