<def-group>
  <definition class="compliance" id="package_iptables-persistent_installed"
  version="1">
    <metadata>
        <title>Install iptables-persistent Package</title>
            <affected family="unix">
                <platform>multi_platform_all</platform>
            </affected>
        <description>The DPKG package iptables-persistent should be installed.</description>
    </metadata>
    <criteria operator="OR" comment="package iptables-persistent is installed or not needed">
      <criteria comment="iptables-persistent is not needed" operator="AND">
        <criterion comment="variable var_network_filtering_service is set to iptables"
        test_ref="package_iptables-persistent_installed_test_variable_var_network_filtering_service" negate="true"/>
      </criteria>
      <criteria comment="package iptables-persistent is installed and needed" operator="AND">
        <criterion comment="package iptables-persistent is installed"
        test_ref="test_package_iptables-persistent_installed" />
        <criterion comment="variable var_network_filtering_service is set to iptables"
        test_ref="package_iptables-persistent_installed_test_variable_var_network_filtering_service" />
      </criteria>
    </criteria>
  </definition>
<ind:variable_test id="package_iptables-persistent_installed_test_variable_var_network_filtering_service"
  comment="Check external var_network_filtering_service is set to iptables" check="all" version="1">
    <ind:object object_ref="obj_package_iptables-persistent_installed_test_variable_var_network_filtering_service"/>
    <ind:state state_ref="ste_package_iptables-persistent_installed_test_variable_var_network_filtering_service" />
  </ind:variable_test>

  <ind:variable_object id="obj_package_iptables-persistent_installed_test_variable_var_network_filtering_service" version="1">
    <ind:var_ref>var_network_filtering_service</ind:var_ref>
  </ind:variable_object>
  <ind:variable_state id="ste_package_iptables-persistent_installed_test_variable_var_network_filtering_service" version="1">
    <ind:value operation="equals" datatype="string">iptables</ind:value>
  </ind:variable_state>

  <external_variable comment="External variable var_network_filtering_service" datatype="string" id="var_network_filtering_service" version="1" />

  <linux:dpkginfo_test check="all" check_existence="all_exist"
  id="test_package_iptables-persistent_installed" version="1"
  comment="package iptables-persistent is installed">
    <linux:object object_ref="obj_test_package_iptables-persistent_installed" />
    
  </linux:dpkginfo_test>
  <linux:dpkginfo_object id="obj_test_package_iptables-persistent_installed" version="1">
    <linux:name>iptables-persistent</linux:name>
  </linux:dpkginfo_object>
  

</def-group>