[tests/selinux] pr775-checkpolicy-revdeps: fix 2 failing test phases

[tests/selinux] pr775-checkpolicy-revdeps: fix 2 failing test phases

[Milos Malik]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : bf766edd958204a94cfb012ffe31b1531133fd2e
            Author : Milos Malik <mmalik@redhat.com>
            Date   : 2021-11-01T07:26:25+00:00
            Stats  : +2/-2 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/bf766edd958204a94cfb012ffe31b1531133fd2e?branch=pr775-checkpolicy-revdeps

            Log:
            fix 2 failing test phases

Test phase devoted to BZ#1614236 looked for getattr and open permissions,
but they are not listed in the bug report. The only permission mentioned
in the bug report is read and that will be tested from now on.

Because BZ#1878094 is not yet fixed, the cleanup phase finds certain
SELinux denials that appeared during the run of the automated test.
These SELinux denials are related to the way systemd and SELinux policy
handle the creation of objects under /run/user/<UID>/ directory.
Because they are not related to D-bus services, they will be ignored
from now on.

---
diff --git a/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh b/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh
index c0bdbd9..1ad9cb7 100755
--- a/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh
+++ b/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh
@@ -99,7 +99,7 @@ rlJournalStart
     rlPhaseStartTest "bz#1614236"
         rlSEMatchPathCon "/usr/bin/dbus-daemon" "dbusd_exec_t"
         rlSEMatchPathCon "/dev/nvme0n1p1" "nvme_device_t"
-        rlSESearchRule "allow system_dbusd_t nvme_device_t : blk_file { getattr open read }"
+        rlSESearchRule "allow system_dbusd_t nvme_device_t : blk_file { read } [ ]"
     rlPhaseEnd
     fi
 
@@ -161,7 +161,7 @@ rlJournalStart
 
     rlPhaseStartCleanup
         sleep 2
-        rlSECheckAVC
+        rlSECheckAVC --ignore 'type=AVC .* create .*systemd .*:user_t:.*:user_tmp_t:.*tclass=dir'
         rm -f files.txt
 
         rlFileRestore