From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Amith Kumar To: git-commits@fedoraproject.org Subject: [tests/selinux] pr775-checkpolicy-revdeps: harden tools to block rogue python modules Date: Fri, 11 Sep 2026 13:20:15 GMT Message-ID: <178913281501.1.937442327470671397.tests-selinux-8f54ba515e28@fedoraproject.org> List-ID: X-Git-Repo: tests/selinux X-Git-Branch: pr775-checkpolicy-revdeps X-Git-Rev: 8f54ba515e28aed3bdf48b0ba5360d717f7d7a2f ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHRlc3RzL3NlbGludXgKICAgICAgICAgICAgQnJhbmNoIDogcHI3NzUtY2hlY2twb2xp Y3ktcmV2ZGVwcwogICAgICAgICAgICBDb21taXQgOiA4ZjU0YmE1MTVlMjhhZWQzYmRmNDhiMGJh NTM2MGQ3MTdmN2Q3YTJmCiAgICAgICAgICAgIEF1dGhvciA6IEFtaXRoIEt1bWFyIDxhcGVldGhh bUByZWRoYXQuY29tPgogICAgICAgICAgICBEYXRlICAgOiAyMDIyLTExLTAxVDE4OjM5OjQwKzAw OjAwCiAgICAgICAgICAgIFN0YXRzICA6ICsxNTcvLTAgaW4gNCBmaWxlKHMpCiAgICAgICAgICAg IFVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3Rlc3RzL3NlbGludXgvYy84 ZjU0YmE1MTVlMjhhZWQzYmRmNDhiMGJhNTM2MGQ3MTdmN2Q3YTJmP2JyYW5jaD1wcjc3NS1jaGVj a3BvbGljeS1yZXZkZXBzCgogICAgICAgICAgICBMb2c6CiAgICAgICAgICAgIGhhcmRlbiB0b29s cyB0byBibG9jayByb2d1ZSBweXRob24gbW9kdWxlcwoKQWRkIHRlc3QgdG8gcG9saWN5Y29yZXV0 aWxzL1JlZ3Jlc3Npb24gc3VpdGUgd2hpY2ggdmVyaWZpZXMgYnVnIDIxMjg5NzYKYW5kIGVuc3Vy ZXMgdGhhdCBpcnJlbGV2YW50IHB5dGhvbiBzY3JpcHRzIGFyZSBub3QgZ2l2ZW4gcHJlY2VkZW5j ZSBvdmVyCnRvb2xzIGxpa2Ugc2VtYW5hZ2UuCgpTaWduZWQtb2ZmLWJ5OiBBbWl0aCBLdW1hciA8 YXBlZXRoYW1AcmVkaGF0LmNvbT4KCi0tLQpkaWZmIC0tZ2l0IGEvcG9saWN5Y29yZXV0aWxzL3B5 dGhvbi1tb2R1bGUtcHJlY2VkZW5jZS1pc3N1ZS9NYWtlZmlsZSBiL3BvbGljeWNvcmV1dGlscy9w eXRob24tbW9kdWxlLXByZWNlZGVuY2UtaXNzdWUvTWFrZWZpbGUKbmV3IGZpbGUgbW9kZSAxMDA2 NDQKaW5kZXggMDAwMDAwMC4uYTVjMzBkMwotLS0gL2Rldi9udWxsCisrKyBiL3BvbGljeWNvcmV1 dGlscy9weXRob24tbW9kdWxlLXByZWNlZGVuY2UtaXNzdWUvTWFrZWZpbGUKQEAgLTAsMCArMSw2 NSBAQAorIyB+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+ fn5+fn5+fn5+fn5+fn5+fn5+fgorIworIyAgIE1ha2VmaWxlIG9mIC9Db3JlT1MvcG9saWN5Y29y ZXV0aWxzL1JlZ3Jlc3Npb24vcHl0aG9uLW1vZHVsZS1wcmVjZWRlbmNlLWlzc3VlCisjICAgRGVz Y3JpcHRpb246IFRvb2xzIGxpa2Ugc2VtYW5hZ2UgbXVzdCBiZSBoYXJkZW5lZCB0byBhdm9pZCBs b2FkaW5nCisjICAgcm9ndWUgcHl0aG9uIG1vZHVsZXMgdGhhdCBjb3VsZCBsZWFkIHRvIHVuZXhw ZWN0ZWQgZmFpbHVyZXMuCisjICAgQXV0aG9yOiBBbWl0aCBLdW1hciA8YXBlZXRoYW1AcmVkaGF0 LmNvbT4KKyMKKyMgfn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+ fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn4KKyMKKyMgICBDb3B5cmlnaHQgKGMpIDIwMjIgUmVkIEhh dCwgSW5jLgorIworIyAgIFRoaXMgcHJvZ3JhbSBpcyBmcmVlIHNvZnR3YXJlOiB5b3UgY2FuIHJl ZGlzdHJpYnV0ZSBpdCBhbmQvb3IKKyMgICBtb2RpZnkgaXQgdW5kZXIgdGhlIHRlcm1zIG9mIHRo ZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZSBhcworIyAgIHB1Ymxpc2hlZCBieSB0aGUgRnJl ZSBTb2Z0d2FyZSBGb3VuZGF0aW9uLCBlaXRoZXIgdmVyc2lvbiAyIG9mCisjICAgdGhlIExpY2Vu c2UsIG9yIChhdCB5b3VyIG9wdGlvbikgYW55IGxhdGVyIHZlcnNpb24uCisjCisjICAgVGhpcyBw cm9ncmFtIGlzIGRpc3RyaWJ1dGVkIGluIHRoZSBob3BlIHRoYXQgaXQgd2lsbCBiZQorIyAgIHVz ZWZ1bCwgYnV0IFdJVEhPVVQgQU5ZIFdBUlJBTlRZOyB3aXRob3V0IGV2ZW4gdGhlIGltcGxpZWQK KyMgICB3YXJyYW50eSBvZiBNRVJDSEFOVEFCSUxJVFkgb3IgRklUTkVTUyBGT1IgQSBQQVJUSUNV TEFSCisjICAgUFVSUE9TRS4gIFNlZSB0aGUgR05VIEdlbmVyYWwgUHVibGljIExpY2Vuc2UgZm9y IG1vcmUgZGV0YWlscy4KKyMKKyMgICBZb3Ugc2hvdWxkIGhhdmUgcmVjZWl2ZWQgYSBjb3B5IG9m IHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMgTGljZW5zZQorIyAgIGFsb25nIHdpdGggdGhpcyBwcm9n cmFtLiBJZiBub3QsIHNlZSBodHRwOi8vd3d3LmdudS5vcmcvbGljZW5zZXMvLgorIworIyB+fn5+ fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+ fn5+fn5+fgorCitleHBvcnQgVEVTVD0vQ29yZU9TL3BvbGljeWNvcmV1dGlscy9SZWdyZXNzaW9u L3B5dGhvbi1tb2R1bGUtcHJlY2VkZW5jZS1pc3N1ZQorZXhwb3J0IFRFU1RWRVJTSU9OPTEuMAor CitCVUlMVF9GSUxFUz0KKworRklMRVM9JChNRVRBREFUQSkgcnVudGVzdC5zaCBNYWtlZmlsZSBQ VVJQT1NFCisKKy5QSE9OWTogYWxsIGluc3RhbGwgZG93bmxvYWQgY2xlYW4KKworcnVuOiAkKEZJ TEVTKSBidWlsZAorCS4vcnVudGVzdC5zaAorCitidWlsZDogJChCVUlMVF9GSUxFUykKKwl0ZXN0 IC14IHJ1bnRlc3Quc2ggfHwgY2htb2QgYSt4IHJ1bnRlc3Quc2gKKworY2xlYW46CisJcm0gLWYg Kn4gJChCVUlMVF9GSUxFUykKKworaW5jbHVkZSAvdXNyL3NoYXJlL3JodHMvbGliL3JodHMtbWFr ZS5pbmNsdWRlCisKKyQoTUVUQURBVEEpOiBNYWtlZmlsZQorCUBlY2hvICJPd25lcjogICAgICAg ICAgIEFtaXRoIEt1bWFyIDxhcGVldGhhbUByZWRoYXQuY29tPiIgPiAkKE1FVEFEQVRBKQorCUBl Y2hvICJOYW1lOiAgICAgICAgICAgICQoVEVTVCkiID4+ICQoTUVUQURBVEEpCisJQGVjaG8gIlRl c3RWZXJzaW9uOiAgICAgJChURVNUVkVSU0lPTikiID4+ICQoTUVUQURBVEEpCisJQGVjaG8gIlBh dGg6ICAgICAgICAgICAgJChURVNUX0RJUikiID4+ICQoTUVUQURBVEEpCisJQGVjaG8gIkRlc2Ny aXB0aW9uOiAgICAgVG9vbHMgbXVzdCBiZSBoYXJkZW5lZCB0byBibG9jayB1bndhbnRlZCBweXRo b24gbW9kdWxlcyIgPj4gJChNRVRBREFUQSkKKwlAZWNobyAiVHlwZTogICAgICAgICAgICBSZWdy ZXNzaW9uIiA+PiAkKE1FVEFEQVRBKQorCUBlY2hvICJUZXN0VGltZTogICAgICAgIDFtIiA+PiAk KE1FVEFEQVRBKQorCUBlY2hvICJSdW5Gb3I6ICAgICAgICAgIHBvbGljeWNvcmV1dGlscyIgPj4g JChNRVRBREFUQSkKKwlAZWNobyAiUmVxdWlyZXM6ICAgICAgICBwb2xpY3ljb3JldXRpbHMgL3Vz ci9zYmluL3NlbWFuYWdlIiA+PiAkKE1FVEFEQVRBKQorCUBlY2hvICJQcmlvcml0eTogICAgICAg IE5vcm1hbCIgPj4gJChNRVRBREFUQSkKKwlAZWNobyAiTGljZW5zZTogICAgICAgICBHUEx2Misi ID4+ICQoTUVUQURBVEEpCisJQGVjaG8gIkNvbmZpZGVudGlhbDogICAgbm8iID4+ICQoTUVUQURB VEEpCisJQGVjaG8gIkRlc3RydWN0aXZlOiAgICAgbm8iID4+ICQoTUVUQURBVEEpCisJQGVjaG8g IkJ1ZzogICAgICAgICAgICAgMjEyODk3NiIgPj4gJChNRVRBREFUQSkKKwlAZWNobyAiUmVsZWFz ZXM6ICAgICAgICAtUkhFTDQgLVJIRUxDbGllbnQ1IC1SSEVMU2VydmVyNSAtUkhFTDYiID4+ICQo TUVUQURBVEEpCisKKwlyaHRzLWxpbnQgJChNRVRBREFUQSkKKwoKZGlmZiAtLWdpdCBhL3BvbGlj eWNvcmV1dGlscy9weXRob24tbW9kdWxlLXByZWNlZGVuY2UtaXNzdWUvUFVSUE9TRSBiL3BvbGlj eWNvcmV1dGlscy9weXRob24tbW9kdWxlLXByZWNlZGVuY2UtaXNzdWUvUFVSUE9TRQpuZXcgZmls ZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5iMzkyNTcxCi0tLSAvZGV2L251bGwKKysrIGIv cG9saWN5Y29yZXV0aWxzL3B5dGhvbi1tb2R1bGUtcHJlY2VkZW5jZS1pc3N1ZS9QVVJQT1NFCkBA IC0wLDAgKzEsNCBAQAorUFVSUE9TRSBvZiAvQ29yZU9TL3BvbGljeWNvcmV1dGlscy9SZWdyZXNz aW9uL3B5dGhvbi1tb2R1bGUtcHJlY2VkZW5jZS1pc3N1ZQorRGVzY3JpcHRpb246IFRvb2xzIGxp a2Ugc2VtYW5hZ2UgbXVzdCBiZSBoYXJkZW5lZCB0byBhdm9pZCBsb2FkaW5nIHJvZ3VlIHB5dGhv biBtb2R1bGVzIHRoYXQgCisgICAgICAgICAgICAgY291bGQgbGVhZCB0byB1bmV4cGVjdGVkIGZh aWx1cmVzLgorQXV0aG9yOiBBbWl0aCBLdW1hciA8YXBlZXRoYW1AcmVkaGF0LmNvbT4KCmRpZmYg LS1naXQgYS9wb2xpY3ljb3JldXRpbHMvcHl0aG9uLW1vZHVsZS1wcmVjZWRlbmNlLWlzc3VlL21h aW4uZm1mIGIvcG9saWN5Y29yZXV0aWxzL3B5dGhvbi1tb2R1bGUtcHJlY2VkZW5jZS1pc3N1ZS9t YWluLmZtZgpuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi40ODU2OGJjCi0tLSAv ZGV2L251bGwKKysrIGIvcG9saWN5Y29yZXV0aWxzL3B5dGhvbi1tb2R1bGUtcHJlY2VkZW5jZS1p c3N1ZS9tYWluLmZtZgpAQCAtMCwwICsxLDI5IEBACitzdW1tYXJ5OiBIYXJkZW4gdG9vbHMgdG8g YXZvaWQgbG9hZGluZyBvZiB1bmNoZWNrZWQgcHl0aG9uIG1vZHVsZXMuCitkZXNjcmlwdGlvbjog VG9vbHMgbGlrZSBzZW1hbmFnZSBtdXN0IGJlIGhhcmRlbmVkIHRvIGF2b2lkIGxvYWRpbmcgcm9n dWUgcHl0aG9uIG1vZHVsZXMgdGhhdCBjb3VsZCBsZWFkIHRvIHVuZXhwZWN0ZWQgZmFpbHVyZXMu Citjb250YWN0OiBBbWl0aCBLdW1hciA8YXBlZXRoYW1AcmVkaGF0LmNvbT4KKworY29tcG9uZW50 OgorICAtIHBvbGljeWNvcmV1dGlscwordGVzdDogLi9ydW50ZXN0LnNoCitmcmFtZXdvcms6IGJl YWtlcmxpYgorcmVjb21tZW5kOgorICAtIHBvbGljeWNvcmV1dGlscworICAtIC91c3Ivc2Jpbi9z ZW1hbmFnZQorZHVyYXRpb246IDFtCitlbmFibGVkOiB0cnVlCit0YWc6CisgIC0gQ0ktVGllci0x CisgIC0gTm9SSEVMNAorICAtIE5vUkhFTDUKKyAgLSBOb1JIRUw2CisgIC0gVElQcGFzc19TZWN1 cml0eQorICAtIFRpZXJDYW5kaWRhdGVzUEFTUworICAtIGYzMmZyaWVuZGx5CisgIC0gZjMzZnJp ZW5kbHkKKyAgLSB0YXJnZXRlZAorbGluazoKKyAgLSByZWxhdGVzOiBodHRwczovL2J1Z3ppbGxh LnJlZGhhdC5jb20vc2hvd19idWcuY2dpP2lkPTIxMjg5NzYKK2FkanVzdDoKKyAgLSBlbmFibGVk OiBmYWxzZQorICAgIHdoZW46IGRpc3RybyA9PSByaGVsLTQsIHJoZWwtNSwgcmhlbC02CisgICAg Y29udGludWU6IGZhbHNlCgpkaWZmIC0tZ2l0IGEvcG9saWN5Y29yZXV0aWxzL3B5dGhvbi1tb2R1 bGUtcHJlY2VkZW5jZS1pc3N1ZS9ydW50ZXN0LnNoIGIvcG9saWN5Y29yZXV0aWxzL3B5dGhvbi1t b2R1bGUtcHJlY2VkZW5jZS1pc3N1ZS9ydW50ZXN0LnNoCm5ldyBmaWxlIG1vZGUgMTAwNzU1Cmlu ZGV4IDAwMDAwMDAuLjdlOTE1OTIKLS0tIC9kZXYvbnVsbAorKysgYi9wb2xpY3ljb3JldXRpbHMv cHl0aG9uLW1vZHVsZS1wcmVjZWRlbmNlLWlzc3VlL3J1bnRlc3Quc2gKQEAgLTAsMCArMSw1OSBA QAorIyEvYmluL2Jhc2gKKyMgdmltOiBkaWN0Kz0vdXNyL3NoYXJlL2JlYWtlcmxpYi9kaWN0aW9u YXJ5LnZpbSBjcHQ9Lix3LGIsdSx0LGksaworIyB+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+ fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fgorIworIyAgIHJ1bnRlc3Qu c2ggb2YgL0NvcmVPUy9wb2xpY3ljb3JldXRpbHMvUmVncmVzc2lvbi9weXRob24tbW9kdWxlLXBy ZWNlZGVuY2UtaXNzdWUKKyMgICBEZXNjcmlwdGlvbjogVG9vbHMgbGlrZSBzZW1hbmFnZSBtdXN0 IGJlIGhhcmRlbmVkIHRvIGF2b2lkIGxvYWRpbmcKKyMgICAgICAgICAgICAgICAgcm9ndWUgcHl0 aG9uIG1vZHVsZXMgdGhhdCBjb3VsZCBsZWFkIHRvIHVuZXhwZWN0ZWQgZmFpbHVyZXMuCisjICAg QXV0aG9yOiBBbWl0aCBLdW1hciA8YXBlZXRoYW1AcmVkaGF0LmNvbT4KKyMKKyMgfn5+fn5+fn5+ fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+ fn4KKyMKKyMgICBDb3B5cmlnaHQgKGMpIDIwMjIgUmVkIEhhdCwgSW5jLgorIworIyAgIFRoaXMg cHJvZ3JhbSBpcyBmcmVlIHNvZnR3YXJlOiB5b3UgY2FuIHJlZGlzdHJpYnV0ZSBpdCBhbmQvb3IK KyMgICBtb2RpZnkgaXQgdW5kZXIgdGhlIHRlcm1zIG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJsaWMg TGljZW5zZSBhcworIyAgIHB1Ymxpc2hlZCBieSB0aGUgRnJlZSBTb2Z0d2FyZSBGb3VuZGF0aW9u LCBlaXRoZXIgdmVyc2lvbiAyIG9mCisjICAgdGhlIExpY2Vuc2UsIG9yIChhdCB5b3VyIG9wdGlv bikgYW55IGxhdGVyIHZlcnNpb24uCisjCisjICAgVGhpcyBwcm9ncmFtIGlzIGRpc3RyaWJ1dGVk IGluIHRoZSBob3BlIHRoYXQgaXQgd2lsbCBiZQorIyAgIHVzZWZ1bCwgYnV0IFdJVEhPVVQgQU5Z IFdBUlJBTlRZOyB3aXRob3V0IGV2ZW4gdGhlIGltcGxpZWQKKyMgICB3YXJyYW50eSBvZiBNRVJD SEFOVEFCSUxJVFkgb3IgRklUTkVTUyBGT1IgQSBQQVJUSUNVTEFSCisjICAgUFVSUE9TRS4gIFNl ZSB0aGUgR05VIEdlbmVyYWwgUHVibGljIExpY2Vuc2UgZm9yIG1vcmUgZGV0YWlscy4KKyMKKyMg ICBZb3Ugc2hvdWxkIGhhdmUgcmVjZWl2ZWQgYSBjb3B5IG9mIHRoZSBHTlUgR2VuZXJhbCBQdWJs aWMgTGljZW5zZQorIyAgIGFsb25nIHdpdGggdGhpcyBwcm9ncmFtLiBJZiBub3QsIHNlZSBodHRw Oi8vd3d3LmdudS5vcmcvbGljZW5zZXMvLgorIworIyB+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+ fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fn5+fgorCisjIEluY2x1ZGUg QmVha2VyIGVudmlyb25tZW50CisuIC91c3Ivc2hhcmUvYmVha2VybGliL2JlYWtlcmxpYi5zaCB8 fCBleGl0IDEKKworUEFDS0FHRT0icG9saWN5Y29yZXV0aWxzIgorCitybEpvdXJuYWxTdGFydAor ICAgIHJsUGhhc2VTdGFydFNldHVwCisgICAgICAgIHJsQXNzZXJ0UnBtICRQQUNLQUdFCisgICAg ICAgIHJsUnVuICJ0bXBEaXI9XCQobWt0ZW1wIC1kKSIgMCAiQ3JlYXRpbmcgdG1wIGRpcmVjdG9y eSIKKyAgICAgICAgcmxSdW4gInB1c2hkICR0bXBEaXIiCisgICAgcmxQaGFzZUVuZAorCisgICAg cmxQaGFzZVN0YXJ0VGVzdCAiYnoyMTI4OTc2IFRvb2xzIG11c3QgYmUgaGFyZGVuZWQgdG8gbm90 IGxvYWQgcm9ndWUgcHl0aG9uIG1vZHVsZXMiCisgICAgICAgICMgQ3JlYXRlIGEgY3VzdG9tIHB5 dGhvbiBzY3JpcHQgaW4gL3Vzci9zYmluCitjYXQgPiAvdXNyL3NiaW4vYXVkaXQucHkgPDwgRU9G CitpbXBvcnQgc3lzCitwcmludCgiQkFEIEdVWSEiLCBmaWxlPXN5cy5zdGRlcnIpCitzeXMuZXhp dCgxKQorRU9GCisgICAgICAgICMgTGlzdCBhbGwgYm9vbGVhbiByZWNvcmRzCisgICAgICAgIHJs UnVuICJzZW1hbmFnZSBib29sZWFuIC1sID4gL2Rldi9udWxsIiAwCisgICAgcmxQaGFzZUVuZAor CisgICAgcmxQaGFzZVN0YXJ0Q2xlYW51cAorICAgICAgICAjIFJlbW92ZSBpcnJlbGV2YW50IGZp bGVzCisgICAgICAgIHJsUnVuICJybSAvdXNyL3NiaW4vYXVkaXQucHkiCisgICAgICAgIHJsUnVu ICJwb3BkIgorICAgICAgICBybFJ1biAicm0gLXIgJHRtcERpciIgMCAiUmVtb3ZpbmcgdG1wIGRp cmVjdG9yeSIKKyAgICBybFBoYXNlRW5kCitybEpvdXJuYWxQcmludFRleHQKK3JsSm91cm5hbEVu ZAo=