Merge pull request #11191 from teacup-on-rockingchair/nftables_iptabl…

…es_mutex Make package installation for iptables and nftables mutually exclusive
ComplianceAsCode · Apr 16, 2024 · 6718a87 · 6718a87
2 parents 261aab7 + 77390db
commit 6718a87
Show file tree

Hide file tree

Showing 3 changed files with 11 additions and 2 deletions.
diff --git a/linux_os/guide/system/network/network-iptables/package_iptables_installed/rule.yml b/linux_os/guide/system/network/network-iptables/package_iptables_installed/rule.yml
@@ -1,7 +1,7 @@
 documentation_complete: true
 
 
-platform: machine and not rhcos4-rhel9
+platform: machine and not rhcos4-rhel9 and service_disabled[nftables] and service_disabled[ufw]
 
 title: 'Install iptables Package'
 

diff --git a/linux_os/guide/system/network/network-nftables/package_nftables_installed/rule.yml b/linux_os/guide/system/network/network-nftables/package_nftables_installed/rule.yml
@@ -32,7 +32,7 @@ ocil_clause: 'the package is not installed'
 
 ocil: '{{{ ocil_package(package="nftables") }}}'
 
-platform: machine
+platform: machine and service_disabled[iptables] and service_disabled[ufw]
 
 template:
     name: package_installed

diff --git a/shared/applicability/service_disabled.yml b/shared/applicability/service_disabled.yml
@@ -7,3 +7,12 @@ args:
   firewalld:
       servicename: firewalld
       packagename: firewalld
+  iptables:
+      servicename: iptables
+      packagename: iptables
+  nftables:
+      servicename: nftables
+      packagename: nftables
+  ufw:
+      servicename: ufw
+      packagename: ufw