Unverified Commit c012e6ec authored by Derek Nola's avatar Derek Nola Committed by GitHub

Changed iptables version check for fail if version is between 1.8.0 and 1.8.3…

Changed iptables version check for fail if version is between 1.8.0 and 1.8.3 and using nf_tables mode (#3454) Signed-off-by: 's avatardereknola <derek.nola@suse.com>
parent eac48f69
......@@ -197,6 +197,9 @@ echo
version_ge() {
[ "$1" = "$2" ] || [ "$(printf '%s\n' "$@" | sort -V | head -n 1)" != "$1" ]
}
version_less() {
[ "$(printf '%s\n' "$@" | sort -rV | head -n 1)" != "$1" ]
}
which_iptables() {
(
localIPtables=$(command -v iptables)
......@@ -224,8 +227,8 @@ echo
wrap_warn "- $iptablesCmd" "unknown version: $iptablesInfo"
elif version_ge $iptablesVersion v1.8.0; then
iptablesMode=$(echo $iptablesInfo | awk '{ print $3 }')
if [ "$iptablesMode" != "(legacy)" ]; then
wrap_bad "- $label" 'should be older than v1.8.0 or in legacy mode'
if [ "$iptablesMode" != "(legacy)" ] && version_less $iptablesVersion v1.8.4; then
wrap_bad "- $label" 'should be older than v1.8.0, newer than v1.8.3, or in legacy mode'
else
wrap_good "- $label" 'ok'
fi
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment