[tests/selinux] pr775-checkpolicy-revdeps: selinux-policy: Do not test if rpmdb can access host name services

[tests/selinux] pr775-checkpolicy-revdeps: selinux-policy: Do not test if rpmdb can access host name services

[Zdenek Pytela]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : ad7293e725743754796953340664da78fccc805a
            Author : Zdenek Pytela <zpytela@redhat.com>
            Date   : 2023-01-09T16:28:59+00:00
            Stats  : +4/-29 in 3 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/ad7293e725743754796953340664da78fccc805a?branch=pr775-checkpolicy-revdeps

            Log:
            selinux-policy: Do not test if rpmdb can access host name services

Unlike originally reported in bz#1461313 and in some duplicates,
rpmdb does not need access to resolv.conf and sssd any longer.
Refer to https://bugzilla.redhat.com/show_bug.cgi?id=1461313#c73
for more information.

---
diff --git a/selinux-policy/rpmdb-and-similar/Makefile b/selinux-policy/rpmdb-and-similar/Makefile
index f7d2876..e26c29e 100644
--- a/selinux-policy/rpmdb-and-similar/Makefile
+++ b/selinux-policy/rpmdb-and-similar/Makefile
@@ -62,13 +62,9 @@ $(METADATA): Makefile
 	@echo "Confidential:    no" >> $(METADATA)
 	@echo "Destructive:     no" >> $(METADATA)
 	@echo "Releases:        -RHEL4 -RHEL5 -RHEL6 -RHEL7 -RHEL8" >> $(METADATA)
-	@echo "Bug:             1898298" >> $(METADATA) # Fedora 33
+	@echo "Bug:             1461313" >> $(METADATA) # Fedora 32
 	@echo "Bug:             1899548" >> $(METADATA) # Fedora 33
-	@echo "Bug:             1900383" >> $(METADATA) # Fedora 33
-	@echo "Bug:             1900386" >> $(METADATA) # Fedora 33
-	@echo "Bug:             1900388" >> $(METADATA) # Fedora 33
-	@echo "Bug:             1900390" >> $(METADATA) # Fedora 33
-	@echo "Bug:             1900391" >> $(METADATA) # Fedora 33
+	@echo "Bug:             2023163" >> $(METADATA) # Fedora 35
 
 	rhts-lint $(METADATA)
 

diff --git a/selinux-policy/rpmdb-and-similar/main.fmf b/selinux-policy/rpmdb-and-similar/main.fmf
index a5fb8b4..1adc4e3 100644
--- a/selinux-policy/rpmdb-and-similar/main.fmf
+++ b/selinux-policy/rpmdb-and-similar/main.fmf
@@ -29,13 +29,9 @@ tag:
   - NoRHEL7
   - targeted
 link:
-  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1898298
+  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1461313
   - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1899548
-  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1900383
-  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1900386
-  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1900388
-  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1900390
-  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1900391
+  - relates: https://bugzilla.redhat.com/show_bug.cgi?id=2023163
 adjust:
   - enabled: false
     when: distro == rhel-4, rhel-5, rhel-6, rhel-7, rhel-8

diff --git a/selinux-policy/rpmdb-and-similar/runtest.sh b/selinux-policy/rpmdb-and-similar/runtest.sh
index 13c5442..5fa96e0 100755
--- a/selinux-policy/rpmdb-and-similar/runtest.sh
+++ b/selinux-policy/rpmdb-and-similar/runtest.sh
@@ -62,26 +62,9 @@ rlJournalStart
         sleep 2
     rlPhaseEnd
 
-    rlPhaseStartTest "bz#1898298"
-        rlSEMatchPathCon "/usr/bin/rpmdb" "rpmdb_exec_t"
-        rlSEMatchPathCon "/etc/resolv.conf" "net_conf_t"
-        rlSESearchRule "allow rpmdb_t net_conf_t : lnk_file { getattr read } [ ]"
-    rlPhaseEnd
-
     rlPhaseStartTest "bz#1899548"
-        # also covers duplicates: 1900383, 1900386, 1900388, 1900389, 1900390, 1900391
         rlSEMatchPathCon "/usr/bin/rpmdb" "rpmdb_exec_t"
-        rlSEMatchPathCon "/var/lib/sss/mc/passwd" "sssd_public_t"
-        rlSEMatchPathCon "/var/lib/sss/pipes/nss" "sssd_var_lib_t"
-        rlSEMatchPathCon "/run/dbus/system_bus_socket" "system_dbusd_var_run_t"
         rlSESearchRule "allow rpmdb_t user_devpts_t : chr_file { read write } [ ]"
-        rlSESearchRule "dontaudit rpmdb_t sssd_public_t : file { getattr open map } [ ]"
-        rlSESearchRule "dontaudit rpmdb_t sssd_var_lib_t : sock_file { write } [ ]"
-        rlSESearchRule "dontaudit rpmdb_t sssd_t : unix_stream_socket { connectto } [ ]"
-        rlSESearchRule "dontaudit rpmdb_t system_dbusd_var_run_t : sock_file { write } [ ]"
-        rlSESearchRule "dontaudit rpmdb_t system_dbusd_t : unix_stream_socket { connectto } [ ]"
-        rlSESearchRule "dontaudit rpmdb_t system_dbusd_t : dbus { send_msg } [ ]"
-        rlSESearchRule "dontaudit system_dbusd_t rpmdb_t : dbus { send_msg } [ ]"
     rlPhaseEnd
 
     rlPhaseStartTest "real scenario -- standalone service"