public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Milos Malik <mmalik@redhat.com>
To: git-commits@fedoraproject.org
Subject: [tests/selinux] pr775-checkpolicy-revdeps: inform the framework to expect SELinux denials
Date: Fri, 11 Sep 2026 13:23:16 GMT	[thread overview]
Message-ID: <178913299645.1.10511698427521967287.tests-selinux-d2d113021172@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : d2d11302117235eff030f833b3402dbbf9421cd0
            Author : Milos Malik <mmalik@redhat.com>
            Date   : 2025-09-04T11:35:02+02:00
            Stats  : +24/-0 in 8 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/d2d11302117235eff030f833b3402dbbf9421cd0?branch=pr775-checkpolicy-revdeps

            Log:
            inform the framework to expect SELinux denials

Some tests intentionally trigger SELinux denials during their run
and there is no need to fail because of them. The default value
of avc check is not suitable for these tests.

---
diff --git a/kernel/avc_log_actual_context_if_invalid/main.fmf b/kernel/avc_log_actual_context_if_invalid/main.fmf
index 44160b6..719b580 100644
--- a/kernel/avc_log_actual_context_if_invalid/main.fmf
+++ b/kernel/avc_log_actual_context_if_invalid/main.fmf
@@ -25,3 +25,6 @@ link:
   - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=1719666
 environment:
   AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail

diff --git a/kernel/avc_tracepoint/main.fmf b/kernel/avc_tracepoint/main.fmf
index 5f6ff5d..2599ce5 100644
--- a/kernel/avc_tracepoint/main.fmf
+++ b/kernel/avc_tracepoint/main.fmf
@@ -25,3 +25,6 @@ link:
 - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=1954024
 environment:
   AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail

diff --git a/kernel/getxattr_read_out_of_bounds/main.fmf b/kernel/getxattr_read_out_of_bounds/main.fmf
index f3360cb..0a807f2 100644
--- a/kernel/getxattr_read_out_of_bounds/main.fmf
+++ b/kernel/getxattr_read_out_of_bounds/main.fmf
@@ -21,3 +21,6 @@ link:
   - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=1595706
 environment:
   AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail

diff --git a/kernel/selinux-testsuite/main.fmf b/kernel/selinux-testsuite/main.fmf
index ece9456..2dd60df 100644
--- a/kernel/selinux-testsuite/main.fmf
+++ b/kernel/selinux-testsuite/main.fmf
@@ -18,4 +18,7 @@ adjust:
     when: arch = i386
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 id: f491d519-a7cd-4acf-8405-67a6afcc678a

diff --git a/libselinux/validatetrans/main.fmf b/libselinux/validatetrans/main.fmf
index 5c4b812..198ed13 100644
--- a/libselinux/validatetrans/main.fmf
+++ b/libselinux/validatetrans/main.fmf
@@ -17,6 +17,9 @@ recommend:
   - setools-console
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 10m
 enabled: true
 tag:

diff --git a/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf b/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf
index bef40cb..cf211c2 100644
--- a/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf
+++ b/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf
@@ -20,6 +20,9 @@ recommend:
   - policycoreutils
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 5m
 enabled: true
 tag:

diff --git a/selinux-policy/deny-rules/main.fmf b/selinux-policy/deny-rules/main.fmf
index 72e0dfc..43b5448 100644
--- a/selinux-policy/deny-rules/main.fmf
+++ b/selinux-policy/deny-rules/main.fmf
@@ -14,6 +14,9 @@ recommend:
   - expect
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 10m
 enabled: true
 tier: 1

diff --git a/selinux-policy/getrlimit-permission/main.fmf b/selinux-policy/getrlimit-permission/main.fmf
index 0e8bc76..81ee08b 100644
--- a/selinux-policy/getrlimit-permission/main.fmf
+++ b/selinux-policy/getrlimit-permission/main.fmf
@@ -18,6 +18,9 @@ recommend:
   - util-linux
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 10m
 enabled: true
 tag:

                 reply	other threads:[~2026-09-11 13:23 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178913299645.1.10511698427521967287.tests-selinux-d2d113021172@fedoraproject.org \
    --to=mmalik@redhat.com \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox