public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [tests/selinux] pr775-checkpolicy-revdeps: Change default context for timesync runtime files
@ 2026-09-11 13:19 Zdenek Pytela
  0 siblings, 0 replies; only message in thread
From: Zdenek Pytela @ 2026-09-11 13:19 UTC (permalink / raw)
  To: git-commits

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : bb05179a3052db55df3f260b00f91473c4311ef6
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2022-02-01T20:38:06+00:00
            Stats  : +4/-3 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/bb05179a3052db55df3f260b00f91473c4311ef6?branch=pr775-checkpolicy-revdeps

            Log:
            Change default context for timesync runtime files

With the fix for bz#1822131, the default file context for
/run/systemd/timesync and /run/systemd/timesync/synchronized
changed to systemd_timedated_var_run_t, so the test requires
to be updated, too.
Additionally, rules for checking access to the directory and file
for systemd-timesyncd need to be updated.

---
diff --git a/selinux-policy/systemd-timesyncd-and-similar/runtest.sh b/selinux-policy/systemd-timesyncd-and-similar/runtest.sh
index 66f114f..fab5ec7 100755
--- a/selinux-policy/systemd-timesyncd-and-similar/runtest.sh
+++ b/selinux-policy/systemd-timesyncd-and-similar/runtest.sh
@@ -72,10 +72,11 @@ rlJournalStart
 
     if rlIsFedora ; then
     rlPhaseStartTest "bz#1649671"
-        rlSEMatchPathCon "/run/systemd/timesync" "init_var_run_t"
-        rlSEMatchPathCon "/run/systemd/timesync/synchronized" "init_var_run_t"
+        rlSEMatchPathCon "/run/systemd/timesync" "systemd_timedated_var_run_t"
+        rlSEMatchPathCon "/run/systemd/timesync/synchronized" "systemd_timedated_var_run_t"
         rlSESearchRule "allow systemd_timedated_t init_var_run_t : dir { write add_name } [ ]"
-        rlSESearchRule "allow systemd_timedated_t init_var_run_t : file { create write open } [ ]"
+        rlSESearchRule "allow systemd_timedated_t systemd_timedated_var_run_t : dir { write add_name } [ ]"
+        rlSESearchRule "allow systemd_timedated_t systemd_timedated_var_run_t : file { create write open } [ ]"
     rlPhaseEnd
 
     rlPhaseStartTest "bz#1694272"

^ permalink raw reply related	[flat|nested] only message in thread

only message in thread, other threads:[~2026-09-11 13:19 UTC | newest]

Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-11 13:19 [tests/selinux] pr775-checkpolicy-revdeps: Change default context for timesync runtime files Zdenek Pytela

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox