[tests/selinux] pr775-checkpolicy-revdeps: inform the framework to expect SELinux denials

[tests/selinux] pr775-checkpolicy-revdeps: inform the framework to expect SELinux denials

[Milos Malik]

            A new commit has been pushed.

            Repo   : tests/selinux
            Branch : pr775-checkpolicy-revdeps
            Commit : d2d11302117235eff030f833b3402dbbf9421cd0
            Author : Milos Malik <mmalik@redhat.com>
            Date   : 2025-09-04T11:35:02+02:00
            Stats  : +24/-0 in 8 file(s)
            URL    : https://src.fedoraproject.org/tests/selinux/c/d2d11302117235eff030f833b3402dbbf9421cd0?branch=pr775-checkpolicy-revdeps

            Log:
            inform the framework to expect SELinux denials

Some tests intentionally trigger SELinux denials during their run
and there is no need to fail because of them. The default value
of avc check is not suitable for these tests.

---
diff --git a/kernel/avc_log_actual_context_if_invalid/main.fmf b/kernel/avc_log_actual_context_if_invalid/main.fmf
index 44160b6..719b580 100644
--- a/kernel/avc_log_actual_context_if_invalid/main.fmf
+++ b/kernel/avc_log_actual_context_if_invalid/main.fmf
@@ -25,3 +25,6 @@ link:
   - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=1719666
 environment:
   AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail

diff --git a/kernel/avc_tracepoint/main.fmf b/kernel/avc_tracepoint/main.fmf
index 5f6ff5d..2599ce5 100644
--- a/kernel/avc_tracepoint/main.fmf
+++ b/kernel/avc_tracepoint/main.fmf
@@ -25,3 +25,6 @@ link:
 - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=1954024
 environment:
   AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail

diff --git a/kernel/getxattr_read_out_of_bounds/main.fmf b/kernel/getxattr_read_out_of_bounds/main.fmf
index f3360cb..0a807f2 100644
--- a/kernel/getxattr_read_out_of_bounds/main.fmf
+++ b/kernel/getxattr_read_out_of_bounds/main.fmf
@@ -21,3 +21,6 @@ link:
   - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=1595706
 environment:
   AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail

diff --git a/kernel/selinux-testsuite/main.fmf b/kernel/selinux-testsuite/main.fmf
index ece9456..2dd60df 100644
--- a/kernel/selinux-testsuite/main.fmf
+++ b/kernel/selinux-testsuite/main.fmf
@@ -18,4 +18,7 @@ adjust:
     when: arch = i386
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 id: f491d519-a7cd-4acf-8405-67a6afcc678a

diff --git a/libselinux/validatetrans/main.fmf b/libselinux/validatetrans/main.fmf
index 5c4b812..198ed13 100644
--- a/libselinux/validatetrans/main.fmf
+++ b/libselinux/validatetrans/main.fmf
@@ -17,6 +17,9 @@ recommend:
   - setools-console
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 10m
 enabled: true
 tag:

diff --git a/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf b/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf
index bef40cb..cf211c2 100644
--- a/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf
+++ b/mcstrans/bz442327-setfscreatecon-with-invalid-context/main.fmf
@@ -20,6 +20,9 @@ recommend:
   - policycoreutils
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 5m
 enabled: true
 tag:

diff --git a/selinux-policy/deny-rules/main.fmf b/selinux-policy/deny-rules/main.fmf
index 72e0dfc..43b5448 100644
--- a/selinux-policy/deny-rules/main.fmf
+++ b/selinux-policy/deny-rules/main.fmf
@@ -14,6 +14,9 @@ recommend:
   - expect
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 10m
 enabled: true
 tier: 1

diff --git a/selinux-policy/getrlimit-permission/main.fmf b/selinux-policy/getrlimit-permission/main.fmf
index 0e8bc76..81ee08b 100644
--- a/selinux-policy/getrlimit-permission/main.fmf
+++ b/selinux-policy/getrlimit-permission/main.fmf
@@ -18,6 +18,9 @@ recommend:
   - util-linux
 environment:
     AVC_ERROR: +no_avc_check
+check:
+  - how: avc
+    result: xfail
 duration: 10m
 enabled: true
 tag: