[tests/selinux] pr775-checkpolicy-revdeps: fix the /proc/net/unix SELinux context check

[tests/selinux] pr775-checkpolicy-revdeps: fix the /proc/net/unix SELinux context check

[Milos Malik]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : e12be9d139b20207884c6b4bdb398a06f3a464ad
            Author : Milos Malik <mmalik@redhat.com>
            Date   : 2022-01-11T09:06:39+01:00
            Stats  : +4/-2 in 2 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/e12be9d139b20207884c6b4bdb398a06f3a464ad?branch=pr775-checkpolicy-revdeps

            Log:
            fix the /proc/net/unix SELinux context check

The test phase failed because the following command returned <<none>>:

  matchpathcon /proc/net/unix

SELinux policy does not define a default label for the /proc/net/unix
file. The file inherits its SELinux context from the /proc filesystem.
As a fix, a simple 'ls -Z' command is used to check the SELinux context.

The test phase also covers BZ#2038963 and BZ#2038157, because the same
issue appears on RHEL-8 and Fedora 35.

---
diff --git a/selinux-policy/smbcontrol-and-similar/Makefile b/selinux-policy/smbcontrol-and-similar/Makefile
index 14bc31f..1f8ca03 100644
--- a/selinux-policy/smbcontrol-and-similar/Makefile
+++ b/selinux-policy/smbcontrol-and-similar/Makefile
@@ -69,6 +69,8 @@ $(METADATA): Makefile
 	@echo "Bug:             2027740" >> $(METADATA) # RHEL-8
 	@echo "Bug:             2027751" >> $(METADATA) # RHEL-9
 	@echo "Bug:             2033873" >> $(METADATA) # RHEL-8
+	@echo "Bug:             2038157" >> $(METADATA) # RHEL-9
+	@echo "Bug:             2038963" >> $(METADATA) # Fedora 35
 
 	rhts-lint $(METADATA)
 

diff --git a/selinux-policy/smbcontrol-and-similar/runtest.sh b/selinux-policy/smbcontrol-and-similar/runtest.sh
index 1d618bc..f6f219e 100755
--- a/selinux-policy/smbcontrol-and-similar/runtest.sh
+++ b/selinux-policy/smbcontrol-and-similar/runtest.sh
@@ -92,8 +92,8 @@ rlJournalStart
         rlSESearchRule "allow smbcontrol_t smbcontrol_t : udp_socket { create ioctl } [ ]"
     rlPhaseEnd
 
-    rlPhaseStartTest "bz#2033873"
-        rlSEMatchPathCon "/proc/net/unix" "proc_net_t"
+    rlPhaseStartTest "bz#2033873 + bz#2038157 + bz#2038963"
+        rlRun "ls -Z /proc/net/unix | grep :proc_net_t"
         rlSESearchRule "allow smbcontrol_t proc_net_t : file { getattr open read } [ ]"
     rlPhaseEnd
     fi