[tests/selinux] pr775-checkpolicy-revdeps: test if the nfsdcld service is confined on RHEL-8

[tests/selinux] pr775-checkpolicy-revdeps: test if the nfsdcld service is confined on RHEL-8

[Milos Malik]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : 282a711d46f475cbe3318ff3c1a9664401c6e008
            Author : Milos Malik <mmalik@redhat.com>
            Date   : 2021-11-25T10:31:26+01:00
            Stats  : +3/-4 in 2 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/282a711d46f475cbe3318ff3c1a9664401c6e008?branch=pr775-checkpolicy-revdeps

            Log:
            test if the nfsdcld service is confined on RHEL-8

The same issue as described in BZ#1834234 is reproducible on RHEL-8.
It will be tested the same way.

The TC covers BZ#2026588.

---
diff --git a/selinux-policy/nfsdcld-and-similar/Makefile b/selinux-policy/nfsdcld-and-similar/Makefile
index 0de572a..cece726 100644
--- a/selinux-policy/nfsdcld-and-similar/Makefile
+++ b/selinux-policy/nfsdcld-and-similar/Makefile
@@ -54,7 +54,7 @@ $(METADATA): Makefile
 	@echo "Type:            Regression" >> $(METADATA)
 	@echo "TestTime:        10m" >> $(METADATA)
 	@echo "RunFor:          selinux-policy" >> $(METADATA)
-	@echo "Requires:        audit initscripts libselinux libselinux-utils policycoreutils selinux-policy selinux-policy-targeted setools-console nfs-utils" >> $(METADATA)
+	@echo "Requires:        audit /usr/sbin/service libselinux libselinux-utils policycoreutils selinux-policy selinux-policy-targeted setools-console nfs-utils" >> $(METADATA)
 	@echo "RhtsRequires:    library(selinux-policy/common)" >> $(METADATA)
 	@echo "Environment:     AVC_ERROR=+no_avc_check" >> $(METADATA)
 	@echo "Priority:        Normal" >> $(METADATA)
@@ -63,6 +63,7 @@ $(METADATA): Makefile
 	@echo "Destructive:     no" >> $(METADATA)
 	@echo "Releases:        -RHEL4 -RHEL5 -RHEL6 -RHEL7" >> $(METADATA)
 	@echo "Bug:             1834234" >> $(METADATA) # Fedora 32
+	@echo "Bug:             2026588" >> $(METADATA) # RHEL-8
 
 	rhts-lint $(METADATA)
 

diff --git a/selinux-policy/nfsdcld-and-similar/runtest.sh b/selinux-policy/nfsdcld-and-similar/runtest.sh
index 5303eac..bb43287 100755
--- a/selinux-policy/nfsdcld-and-similar/runtest.sh
+++ b/selinux-policy/nfsdcld-and-similar/runtest.sh
@@ -56,15 +56,13 @@ rlJournalStart
         sleep 2
     rlPhaseEnd
 
-    if ! rlIsRHEL 8 ; then
-    rlPhaseStartTest "bz#1834234"
+    rlPhaseStartTest "bz#1834234 + bz#2026588"
         rlSEMatchPathCon "/usr/sbin/nfsdcld" "rpcd_exec_t"
         rlSESearchRule "allow init_t rpcd_exec_t : file { getattr open read execute } [ ]"
         rlSESearchRule "type_transition init_t rpcd_exec_t : process rpcd_t"
         rlSESearchRule "allow init_t rpcd_t : process { transition } [ ]"
         rlSESearchRule "allow rpcd_t nfsd_fs_t : file { getattr open read } [ ]"
     rlPhaseEnd
-    fi
 
     rlPhaseStartTest "real scenario -- standalone service"
         rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"