public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [tests/selinux] pr775-checkpolicy-revdeps: do not use ramfs_t for /dev/shm/.#cred* files
@ 2026-09-11 13:20 Milos Malik
0 siblings, 0 replies; only message in thread
From: Milos Malik @ 2026-09-11 13:20 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : tests/selinux
Branch : pr775-checkpolicy-revdeps
Commit : a79a74c223d53af181565d9937829ca8d58d73d6
Author : Milos Malik <mmalik@redhat.com>
Date : 2023-01-26T10:41:24+01:00
Stats : +3/-2 in 2 file(s)
URL : https://src.fedoraproject.org/tests/selinux/c/a79a74c223d53af181565d9937829ca8d58d73d6?branch=pr775-checkpolicy-revdeps
Log:
do not use ramfs_t for /dev/shm/.#cred* files
The TC needs to adapt to changes introduced by the following commit:
https://github.com/fedora-selinux/selinux-policy/commit/8e908b8d98cbaf8e5df3aadad28b654b6e50c1da
---
diff --git a/selinux-policy/systemd-creds/main.fmf b/selinux-policy/systemd-creds/main.fmf
index 11d0693..65b74a2 100644
--- a/selinux-policy/systemd-creds/main.fmf
+++ b/selinux-policy/systemd-creds/main.fmf
@@ -23,6 +23,7 @@ enabled: true
tag:
- Tier2
- Tier2se
+ - targeted
tier: '2'
adjust:
- enabled: false
diff --git a/selinux-policy/systemd-creds/runtest.sh b/selinux-policy/systemd-creds/runtest.sh
index 643f9df..212b1a5 100755
--- a/selinux-policy/systemd-creds/runtest.sh
+++ b/selinux-policy/systemd-creds/runtest.sh
@@ -51,8 +51,8 @@ rlJournalStart
rlPhaseStartTest "bz#2096857 + bz#2097681"
rlSEMatchPathCon "/usr/bin/systemd-creds" "bin_t"
- rlRun "seinfo --genfscon | grep :ramfs_t"
- rlSESearchRule "allow init_t ramfs_t : file { read write open setattr rename create } [ ]"
+ rlSEMatchPathCon "/dev/shm" "tmpfs_t"
+ rlSESearchRule "allow init_t tmpfs_t : file { read write open setattr rename create } [ ]"
rlPhaseEnd
rlPhaseStartTest "a systemd service loading credentials"
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-11 13:20 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-11 13:20 [tests/selinux] pr775-checkpolicy-revdeps: do not use ramfs_t for /dev/shm/.#cred* files Milos Malik
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox