public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [tests/selinux] pr775-checkpolicy-revdeps: selinux-policy: systemd-sleep has a private type
@ 2026-09-11 13:18 Zdenek Pytela
  0 siblings, 0 replies; only message in thread
From: Zdenek Pytela @ 2026-09-11 13:18 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : 6117dc293c5f88abe0feba7110982ddfbd1fc201
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2020-10-07T13:21:11+00:00
            Stats  : +2/-2 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/6117dc293c5f88abe0feba7110982ddfbd1fc201?branch=pr775-checkpolicy-revdeps

            Log:
            selinux-policy: systemd-sleep has a private type

In latest selinux-policy, the systemd-sleep service is now confined.
The executable and the corresponding process have private types and
the process is allowed to write to swapfiles.

---
diff --git a/selinux-policy/swap-file-and-systemd-access/runtest.sh b/selinux-policy/swap-file-and-systemd-access/runtest.sh
index 7ac9261..920eee1 100755
--- a/selinux-policy/swap-file-and-systemd-access/runtest.sh
+++ b/selinux-policy/swap-file-and-systemd-access/runtest.sh
@@ -61,8 +61,8 @@ rlJournalStart
     rlPhaseEnd
 
     rlPhaseStartTest "bz#1797543 + bz#1798872"
-        rlSEMatchPathCon "/usr/lib/systemd/systemd-sleep" "init_exec_t"
-        rlSESearchRule "allow init_t swapfile_t : file { open read ioctl } [ ]"
+        rlSEMatchPathCon "/usr/lib/systemd/systemd-sleep" "systemd_sleep_exec_t"
+        rlSESearchRule "allow systemd_sleep_t swapfile_t : file { append getattr ioctl lock open read write } [ ]"
     rlPhaseEnd
 
     rlPhaseStartTest "bz#1845594"

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-09-11 13:18 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-11 13:18 [tests/selinux] pr775-checkpolicy-revdeps: selinux-policy: systemd-sleep has a private type Zdenek Pytela

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox