[tests/selinux] pr775-checkpolicy-revdeps: don't look for watch* permissions where they aren't defined

[tests/selinux] pr775-checkpolicy-revdeps: don't look for watch* permissions where they aren't defined

[Milos Malik]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : b28143f1ccdb0bb8a7acf6cbb87e526d7f02aec6
            Author : Milos Malik <mmalik@redhat.com>
            Date   : 2022-11-21T11:44:04+01:00
            Stats  : +2/-0 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/b28143f1ccdb0bb8a7acf6cbb87e526d7f02aec6?branch=pr775-checkpolicy-revdeps

            Log:
            don't look for watch* permissions where they aren't defined

The watch* permissions are not defined by SELinux policy on RHEL-8.x.

---
diff --git a/selinux-policy/systemd-run-and-similar/runtest.sh b/selinux-policy/systemd-run-and-similar/runtest.sh
index 6645068..82990ab 100755
--- a/selinux-policy/systemd-run-and-similar/runtest.sh
+++ b/selinux-policy/systemd-run-and-similar/runtest.sh
@@ -49,9 +49,11 @@ rlJournalStart
         rlSESearchRule "allow init_t user_devpts_t : chr_file { setattr open } [ ]"
     rlPhaseEnd
 
+    if seinfo --common file -x | grep -q watch ; then
     rlPhaseStartTest "bz#1980241"
         rlSESearchRule "allow init_t user_devpts_t : chr_file { watch watch_reads } [ ]"
     rlPhaseEnd
+    fi
 
     rlPhaseStartTest "real scenario"
         rlWatchdog "systemd-run -p IPAddressDeny=127.0.0.1 -t /bin/sh" 10