test: check that contracks are dumped and restored

This tests sets filters which drops all packets which don't
belongs to current tcp connections and creates one tcp connection.
Signed-off-by: Andrew Vagin <avagin@virtuozzo.com>
Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com>

test/zdtm/live/static/Makefile

@@ -64,6 +64,7 @@ TST_NOFILE	=				\
 		socket-tcp			\
 		socket-tcp6			\
 		socket-tcp-local		\
+		socket-tcp-nfconntrack		\
 		socket-tcp6-local		\
 		socket-tcpbuf			\
 		socket-tcpbuf-local		\
@@ -359,6 +360,7 @@ socket-tcpbuf-local: override CFLAGS += -D ZDTM_TCP_LOCAL
 socket-tcpbuf6-local: override CFLAGS += -D ZDTM_TCP_LOCAL -D ZDTM_IPV6
 socket-tcp6-local: override CFLAGS += -D ZDTM_TCP_LOCAL -D ZDTM_IPV6
 socket-tcp-local: override CFLAGS += -D ZDTM_TCP_LOCAL
+socket-tcp-nfconntrack: override CFLAGS += -D ZDTM_TCP_LOCAL -DZDTM_CONNTRACK
 socket_listen6: override CFLAGS += -D ZDTM_IPV6
 sigpending:		override LDLIBS += -lrt
 vdso01:			override LDLIBS += -lrt

test/zdtm/live/static/socket-tcp-nfconntrack.c

+socket-tcp.c
\ No newline at end of file

test/zdtm/live/static/socket-tcp-nfconntrack.desc

+{'flavor': 'h', 'opts': '--tcp-established', 'flags': 'suid'}

test/zdtm/live/static/socket-tcp.c

+#ifndef _GNU_SOURCE
+#define _GNU_SOURCE
+#endif
 #include "zdtmtst.h"
 
 #ifdef ZDTM_IPV6
@@ -16,6 +19,7 @@ const char *test_author = "Andrey Vagin <avagin@parallels.com";
 #include <errno.h>
 #include <stdlib.h>
 #include <signal.h>
+#include <sched.h>
 #include <netinet/tcp.h>
 
 static int port = 8880;
@@ -61,6 +65,15 @@ int main(int argc, char **argv)
 	int val;
 	socklen_t optlen;
 
+#ifdef ZDTM_CONNTRACK
+	unshare(CLONE_NEWNET);
+	if (system("ip link set up dev lo"))
+		return 1;
+	if (system("iptables -A INPUT -i lo -p tcp -m state --state NEW,ESTABLISHED -j ACCEPT"))
+		return 1;
+	system("iptables -A INPUT -j DROP");
+#endif
+
 #ifdef ZDTM_TCP_LOCAL
 	test_init(argc, argv);
 #endif