On Mon, Oct 25, 2021 at 2:48 PM Ondrej Mosnacek <omosnace@xxxxxxxxxx> wrote: > The legacy iptables API is being deprecated in favor of netfilter and > some distributions are starting to disable it in their kernels (e.g. > Fedora ELN, RHEL 10+). To allow getting a clean run of the testsuite on > such kernels, detect the availability of the ip_tables kernel module and > skip the iptables tests if it's not available (either as a loadable > module or built in). > > Signed-off-by: Ondrej Mosnacek <omosnace@xxxxxxxxxx> > --- > tests/inet_socket/test | 21 ++++++++++++++++----- > 1 file changed, 16 insertions(+), 5 deletions(-) Actually, I missed there are similar iptables/nftables tests under tests/sctp as well... I'll need to respin this. -- Ondrej Mosnacek Software Engineer, Linux Security - SELinux kernel Red Hat, Inc.