public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [tests/selinux] pr775-checkpolicy-revdeps: perform the rules check on RHEL-10/CentOS stream 10 only
@ 2026-09-11 13:23 Milos Malik
0 siblings, 0 replies; only message in thread
From: Milos Malik @ 2026-09-11 13:23 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : tests/selinux
Branch : pr775-checkpolicy-revdeps
Commit : 14479be1b9a618dbcde4d66c2eb9bd6d084117de
Author : Milos Malik <mmalik@redhat.com>
Date : 2025-08-28T16:36:40+02:00
Stats : +3/-1 in 1 file(s)
URL : https://src.fedoraproject.org/tests/selinux/c/14479be1b9a618dbcde4d66c2eb9bd6d084117de?branch=pr775-checkpolicy-revdeps
Log:
perform the rules check on RHEL-10/CentOS stream 10 only
Currently, the SELinux denial shown in RHEL-77071 is not reproducible
on RHEL-9 or CentOS stream 9. It makes no sense to check the SELinux
policy rule existence there. The test code relevancy was updated.
---
diff --git a/selinux-policy/fapolicyd-and-similar/runtest.sh b/selinux-policy/fapolicyd-and-similar/runtest.sh
index 90f3d2f..8b359e8 100755
--- a/selinux-policy/fapolicyd-and-similar/runtest.sh
+++ b/selinux-policy/fapolicyd-and-similar/runtest.sh
@@ -114,7 +114,9 @@ rlJournalStart
rlPhaseEnd
rlPhaseStartTest "RHEL-77071"
- rlSESearchRule "allow fapolicyd_t systemd_machined_t : unix_stream_socket { connectto } [ ]"
+ if rlIsCentOS 10 || rlIsRHEL 10 ; then
+ rlSESearchRule "allow fapolicyd_t systemd_machined_t : unix_stream_socket { connectto } [ ]"
+ fi
rlRun "service systemd-machined start"
rlRun "service systemd-machined status -l"
rlRun "service fapolicyd start"
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-11 13:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-11 13:23 [tests/selinux] pr775-checkpolicy-revdeps: perform the rules check on RHEL-10/CentOS stream 10 only Milos Malik
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox