[tests/selinux] pr775-checkpolicy-revdeps: systemd-sysctl-and-similar: Adjust test relevancy

[tests/selinux] pr775-checkpolicy-revdeps: systemd-sysctl-and-similar: Adjust test relevancy

[Stepan Broz]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : 3b84c2b16536dec9f926b1c7373f209ca1255042
            Author : Stepan Broz <sbroz@redhat.com>
            Date   : 2025-04-17T18:18:01+00:00
            Stats  : +19/-17 in 1 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/3b84c2b16536dec9f926b1c7373f209ca1255042?branch=pr775-checkpolicy-revdeps

            Log:
            systemd-sysctl-and-similar: Adjust test relevancy

Do not test "RHEL-56988 + RHEL-58380" on RHEL 9.5 or lower.

---
diff --git a/selinux-policy/systemd-sysctl-and-similar/runtest.sh b/selinux-policy/systemd-sysctl-and-similar/runtest.sh
index 4667ee4..476f811 100755
--- a/selinux-policy/systemd-sysctl-and-similar/runtest.sh
+++ b/selinux-policy/systemd-sysctl-and-similar/runtest.sh
@@ -51,24 +51,26 @@ rlJournalStart
     rlPhaseEnd
 
     if ! rlIsRHEL 8 && ! rlIsCentOS 8 ; then
-    rlPhaseStartTest "bz#2056207 + bz#2056999"
-        rlSEMatchPathCon "/usr/lib/systemd/systemd-sysctl" "systemd_sysctl_exec_t"
-        rlRun "ls -Z /proc/sys/fs/suid_dumpable | grep :proc_security_t"
-        rlRun "ls -Z /proc/sys/fs/protected_hardlinks | grep :proc_security_t"
-        rlRun "ls -Z /proc/sys/fs/protected_symlinks | grep :proc_security_t"
-        rlRun "ls -Z /proc/sys/kernel/kptr_restrict | grep :proc_security_t"
-        rlSESearchRule "allow systemd_sysctl_t proc_security_t : file { read } [ ]"
-    rlPhaseEnd
+        rlPhaseStartTest "bz#2056207 + bz#2056999"
+            rlSEMatchPathCon "/usr/lib/systemd/systemd-sysctl" "systemd_sysctl_exec_t"
+            rlRun "ls -Z /proc/sys/fs/suid_dumpable | grep :proc_security_t"
+            rlRun "ls -Z /proc/sys/fs/protected_hardlinks | grep :proc_security_t"
+            rlRun "ls -Z /proc/sys/fs/protected_symlinks | grep :proc_security_t"
+            rlRun "ls -Z /proc/sys/kernel/kptr_restrict | grep :proc_security_t"
+            rlSESearchRule "allow systemd_sysctl_t proc_security_t : file { read } [ ]"
+        rlPhaseEnd
 
-    rlPhaseStartTest "RHEL-56988 + RHEL-58380"
-        rlRun "man sysctl.d | grep /run/sysctl"
-        rlRun "mkdir -pZ /run/sysctl.d"
-        rlRun "echo 'net.ipv4.conf.eno1.rp_filter=0' > /run/sysctl.d/51-rp_filter.conf"
-        rlRun "restorecon -Rv /run/sysctl.d"
-        rlRun "service systemd-sysctl stop"
-        rlRun "service systemd-sysctl start"
-        rlRun "service systemd-sysctl status" 0,3
-    rlPhaseEnd
+        if ! rlIsRHEL "<9.6" ; then
+        rlPhaseStartTest "RHEL-56988 + RHEL-58380"
+            rlRun "man sysctl.d | grep /run/sysctl"
+            rlRun "mkdir -pZ /run/sysctl.d"
+            rlRun "echo 'net.ipv4.conf.eno1.rp_filter=0' > /run/sysctl.d/51-rp_filter.conf"
+            rlRun "restorecon -Rv /run/sysctl.d"
+            rlRun "service systemd-sysctl stop"
+            rlRun "service systemd-sysctl start"
+            rlRun "service systemd-sysctl status" 0,3
+        rlPhaseEnd
+        fi
     fi
 
     rlPhaseStartTest "real scenario"