[tests/selinux] pr775-checkpolicy-revdeps: selinux-testsuite: enable PATH records while running

[tests/selinux] pr775-checkpolicy-revdeps: selinux-testsuite: enable PATH records while running

[Ondrej Mosnacek]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : af8cdd2711d8c07200d4fff8341435ae15dd496d
            Author : Ondrej Mosnacek <omosnace@redhat.com>
            Date   : 2020-01-02T13:22:13+01:00
            Stats  : +6/-0 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/af8cdd2711d8c07200d4fff8341435ae15dd496d?branch=pr775-checkpolicy-revdeps

            Log:
            selinux-testsuite: enable PATH records while running

This helps when debugging unexpected AVCs. This was formerly done by the
selinux-policy/common library, which the test doesn't use any more, so
let's add this useful feature back with just four simple commands.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>

---
diff --git a/kernel/selinux-testsuite/runtest.sh b/kernel/selinux-testsuite/runtest.sh
index 6f1c35c..a2c794a 100755
--- a/kernel/selinux-testsuite/runtest.sh
+++ b/kernel/selinux-testsuite/runtest.sh
@@ -398,6 +398,9 @@ rlJournalStart
 
             rlRun "popd"
         fi
+        rlRun "AUDIT_FILE=\"\$(mktemp)\""
+        rlRun "auditctl -w \"\$AUDIT_FILE\" -p w" 0 \
+            "Enable creation of PATH audit records"
     rlPhaseEnd
 
     rlPhaseStartTest
@@ -415,6 +418,9 @@ rlJournalStart
     rlPhaseEnd
 
     rlPhaseStartCleanup
+        rlRun "auditctl -W \"\$AUDIT_FILE\" -p w" 0 \
+            "Remove rule for creation of PATH audit records"
+        rlRun "rm -f \"\$AUDIT_FILE\""
         # rlSEBooleanRestore
         # rlSEBooleanRestore allow_domain_fd_use
         # none of above-mentioned commands is able to correctly restore the value in the boolean