Function mustBeRoot

platform/linux/nfqueue_integration_test.go:24–30

(t *testing.T)

)

func mustBeRoot(t *testing.T) {
	t.Helper()
	// iptables listing requires root on this system.
	if err := exec.Command("iptables", "-t", "mangle", "-L", "-n").Run(); err != nil {
		t.Skipf("skipping: no root / iptables: %v", err)
	}
}

// safeScope uses a deliberately unused IP+port so installed rules can't
// interfere with real traffic. 198.51.100.0/24 is TEST-NET-2 (RFC 5737).