public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Zdenek Pytela <zpytela@redhat.com>
To: git-commits@fedoraproject.org
Subject: [tests/selinux] main: Changes adapting to bind packages with suffixes
Date: Wed, 05 Aug 2026 08:16:02 GMT [thread overview]
Message-ID: <178591776295.1.7837476123130915258.tests-selinux-6235e6ffdd32@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : tests/selinux
Branch : main
Commit : 6235e6ffdd3296ffcb482559a8b865a1c4d47270
Author : Zdenek Pytela <zpytela@redhat.com>
Date : 2026-08-05T07:45:36+00:00
Stats : +8/-8 in 1 file(s)
URL : https://src.fedoraproject.org/tests/selinux/c/6235e6ffdd3296ffcb482559a8b865a1c4d47270?branch=main
Log:
Changes adapting to bind packages with suffixes
The bind package now provides executables with suffixes, e.g.
"/usr/bin/named-9.18". That includes the main daemon named, rndc and
other tools. Links to the actual executables are provided using the
alternatives tool.
Subsequently, the named test is now being updated using the readlink command
to get canonical file names.
---
diff --git a/selinux-policy/bz562833-chrooted-named-file-contexts/runtest.sh b/selinux-policy/bz562833-chrooted-named-file-contexts/runtest.sh
index 074f2bb..bb3a8d5 100755
--- a/selinux-policy/bz562833-chrooted-named-file-contexts/runtest.sh
+++ b/selinux-policy/bz562833-chrooted-named-file-contexts/runtest.sh
@@ -50,7 +50,7 @@ rlJournalStart
rlPhaseEnd
rlPhaseStartTest "bz#451970"
- rlSEMatchPathCon "/usr/sbin/named" "named_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/named)" "named_exec_t"
rlSESearchRule "allow named_t port_t : udp_socket { name_bind }"
rlPhaseEnd
@@ -70,7 +70,7 @@ rlJournalStart
rlPhaseEnd
rlPhaseStartTest "bz#578187"
- rlSEMatchPathCon "/usr/sbin/named" "named_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/named)" "named_exec_t"
for PREFIX in "" "/var/named/chroot" ; do
rlSEMatchPathCon "${PREFIX}/var/named/dynamic" "named_cache_t"
done
@@ -78,7 +78,7 @@ rlJournalStart
rlPhaseEnd
rlPhaseStartTest "bz#698257"
- rlSEMatchPathCon "/usr/sbin/named" "named_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/named)" "named_exec_t"
if rlIsRHEL 5 ; then
rlSEMatchPathCon "/var/named/chroot/var/log/update-debug.log" "named_log_t"
fi
@@ -87,7 +87,7 @@ rlJournalStart
if ! rlIsRHEL 5 ; then
rlPhaseStartTest "bz#739886"
- rlSEMatchPathCon "/usr/sbin/rndc" "ndc_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/rndc)" "ndc_exec_t"
rlRun "ls -Z /proc/loadavg | grep :proc_t"
rlSESearchRule "allow ndc_t proc_t : file { getattr open read }"
rlPhaseEnd
@@ -103,7 +103,7 @@ rlJournalStart
rlPhaseEnd
rlPhaseStartTest "bz#1110397 + bz#1166281"
- rlSEMatchPathCon "/usr/sbin/rndc" "ndc_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/rndc)" "ndc_exec_t"
rlSEMatchPathCon "/dev/random" "random_device_t"
rlSEMatchPathCon "/dev/urandom" "urandom_device_t"
rlSESearchRule "allow ndc_t random_device_t : chr_file { getattr open read }"
@@ -117,7 +117,7 @@ rlJournalStart
rlPhaseEnd
rlPhaseStartTest "bz#1103439 + bz#1199473"
- rlSEMatchPathCon "/usr/sbin/named" "named_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/named)" "named_exec_t"
rlSEMatchPortCon udp 1935 flash_port_t
rlSEMatchPortCon udp 2605 bgp_port_t
rlSEMatchPortCon udp 4321 whois_port_t
@@ -141,7 +141,7 @@ rlJournalStart
if ! rlIsRHEL 5 6 ; then
rlPhaseStartTest "bz#1012051"
- rlSEMatchPathCon "/usr/sbin/named" "named_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/named)" "named_exec_t"
rlSESearchRule "allow named_t named_t : key { read write }"
rlPhaseEnd
@@ -203,7 +203,7 @@ rlJournalStart
if ! rlIsRHEL 5 6 7 8 && ! rlIsCentOS 5 6 7 8 ; then
rlPhaseStartTest "bz#1827591 + bz#1923929"
- rlSEMatchPathCon "/usr/sbin/rndc" "ndc_exec_t"
+ rlSEMatchPathCon "$(readlink -en /usr/sbin/rndc)" "ndc_exec_t"
rlSESearchRule "dontaudit ndc_t ndc_t : process { setsched } [ ]"
rlPhaseEnd
fi
reply other threads:[~2026-08-05 8:16 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178591776295.1.7837476123130915258.tests-selinux-6235e6ffdd32@fedoraproject.org \
--to=zpytela@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox