-
Story
-
Resolution: Unresolved
-
Normal
-
None
-
None
-
None
-
Low
-
1
-
rhel-net-firewall
-
None
-
False
-
False
-
-
No
-
NST-firewall-25W48-51
-
None
-
None
-
Release Note Not Required
-
Unspecified
-
Unspecified
-
Unspecified
-
None
New release to resolve RHEL-114095 missed to update expected test suite results stored in SRPM. These are used by Sanity/upstream-testsuite CI test. With nftables-1.0.9-5.el9_7, shell test suite passes without errors and the only failures remaining in py test suite are:
any/tcpopt.t: ERROR: line 58: add rule ip test-ip4 input reset tcp option mptcp: This rule should not have failed. any/tcpopt.t: ERROR: line 59: add rule ip test-ip4 input reset tcp option 2: This rule should not have failed. any/tcpopt.t: ERROR: line 60: add rule ip test-ip4 input reset tcp option 123: This rule should not have failed. bridge/redirect.t: ERROR: line 5: add rule bridge test-bridge prerouting meta broute set 1: This rule should not have failed. inet/dccp.t: ERROR: line 27: add rule ip test-ip4 input dccp option 0 exists: This rule should not have failed. inet/dccp.t: ERROR: line 28: add rule ip test-ip4 input dccp option 43 missing: This rule should not have failed. inet/dccp.t: ERROR: line 29: add rule ip test-ip4 input dccp option 255 exists: This rule should not have failed.
These remain due to lack for TCP option resetting, 'meta broute' and DCCP header matches. While at it, drop these features from nft man page.
