[tests/selinux] pr775-checkpolicy-revdeps: look for policy rules allowing sysadm_t to do perf_event actions

[tests/selinux] pr775-checkpolicy-revdeps: look for policy rules allowing sysadm_t to do perf_event actions

[Milos Malik]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : 303a35cafd99d65a699eab63676df4b6013cbcf5
            Author : Milos Malik <mmalik@redhat.com>
            Date   : 2020-12-14T11:14:32+00:00
            Stats  : +3/-1 in 2 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/303a35cafd99d65a699eab63676df4b6013cbcf5?branch=pr775-checkpolicy-revdeps

            Log:
            look for policy rules allowing sysadm_t to do perf_event actions

The TC also covers BZ#1901958.

---
diff --git a/selinux-policy/perf_event-and-related/Makefile b/selinux-policy/perf_event-and-related/Makefile
index 8dd8ac1..4aaea9a 100644
--- a/selinux-policy/perf_event-and-related/Makefile
+++ b/selinux-policy/perf_event-and-related/Makefile
@@ -63,6 +63,7 @@ $(METADATA): Makefile
 	@echo "Destructive:     no" >> $(METADATA)
 	@echo "Releases:        -RHEL4 -RHEL5 -RHEL6 -RHEL7" >> $(METADATA)
 	@echo "Bug:             1901957" >> $(METADATA) # Fedora 34
+	@echo "Bug:             1901958" >> $(METADATA) # RHEL-8
 
 	rhts-lint $(METADATA)
 

diff --git a/selinux-policy/perf_event-and-related/runtest.sh b/selinux-policy/perf_event-and-related/runtest.sh
index 3578e39..d71422f 100755
--- a/selinux-policy/perf_event-and-related/runtest.sh
+++ b/selinux-policy/perf_event-and-related/runtest.sh
@@ -59,8 +59,9 @@ rlJournalStart
         sleep 2
     rlPhaseEnd
 
-    rlPhaseStartTest "bz#1901957"
+    rlPhaseStartTest "bz#1901957 + bz#1901958"
         rlSESearchRule "allow unconfined_t unconfined_t : perf_event { open cpu kernel read write } [ ]"
+        rlSESearchRule "allow sysadm_t sysadm_t : perf_event { open cpu kernel read write } [ ]"
     rlPhaseEnd
 
     rlPhaseStartTest "real scenario -- perf tool under root"