[PATCH] selftests/net: Add xt_policy config for xfrm_policy test

[PATCH] selftests/net: Add xt_policy config for xfrm_policy test

[Daniel Díaz]

When running Kselftests with the current selftests/net/config
the following problem can be seen with the net:xfrm_policy.sh
selftest:

  # selftests: net: xfrm_policy.sh
  [   41.076721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
  [   41.094787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
  [   41.107635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
  # modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.1.36
  # iptables v1.8.7 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
  # Perhaps iptables or your kernel needs to be upgraded.
  # modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.1.36
  # iptables v1.8.7 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
  # Perhaps iptables or your kernel needs to be upgraded.
  # SKIP: Could not insert iptables rule
  ok 1 selftests: net: xfrm_policy.sh # SKIP

This is because IPsec "policy" match support is not available
to the kernel.

This patch adds CONFIG_NETFILTER_XT_MATCH_POLICY as a module
to the selftests/net/config file, so that `make
kselftest-merge` can take this into consideration.

Signed-off-by: Daniel Díaz <daniel.diaz@linaro.org>
---
 tools/testing/selftests/net/config | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tools/testing/selftests/net/config b/tools/testing/selftests/net/config
index d1d421ec10a3..cd3cc52c59b4 100644
--- a/tools/testing/selftests/net/config
+++ b/tools/testing/selftests/net/config
@@ -50,3 +50,4 @@ CONFIG_CRYPTO_SM4_GENERIC=y
 CONFIG_AMT=m
 CONFIG_VXLAN=m
 CONFIG_IP_SCTP=m
+CONFIG_NETFILTER_XT_MATCH_POLICY=m
-- 
2.34.1

Re: [PATCH] selftests/net: Add xt_policy config for xfrm_policy test

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to netdev/net.git (main)
by David S. Miller <davem@davemloft.net>:

On Fri, 30 Jun 2023 22:41:03 -0600 you wrote:
> When running Kselftests with the current selftests/net/config
> the following problem can be seen with the net:xfrm_policy.sh
> selftest:
> 
>   # selftests: net: xfrm_policy.sh
>   [   41.076721] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
>   [   41.094787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
>   [   41.107635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
>   # modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.1.36
>   # iptables v1.8.7 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
>   # Perhaps iptables or your kernel needs to be upgraded.
>   # modprobe: FATAL: Module ip_tables not found in directory /lib/modules/6.1.36
>   # iptables v1.8.7 (legacy): can't initialize iptables table `filter': Table does not exist (do you need to insmod?)
>   # Perhaps iptables or your kernel needs to be upgraded.
>   # SKIP: Could not insert iptables rule
>   ok 1 selftests: net: xfrm_policy.sh # SKIP
> 
> [...]

Here is the summary with links:
  - selftests/net: Add xt_policy config for xfrm_policy test
    https://git.kernel.org/netdev/net/c/f56d1eeaeabf

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html