public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [tests/selinux] pr775-checkpolicy-revdeps: do not test services which are not available
@ 2026-09-11 13:23 Milos Malik
0 siblings, 0 replies; only message in thread
From: Milos Malik @ 2026-09-11 13:23 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : tests/selinux
Branch : pr775-checkpolicy-revdeps
Commit : 2309f39aebad76b3642a4477a99e88ceb131e7ee
Author : Milos Malik <mmalik@redhat.com>
Date : 2026-03-02T14:44:55+01:00
Stats : +118/-26 in 46 file(s)
URL : https://src.fedoraproject.org/tests/selinux/c/2309f39aebad76b3642a4477a99e88ceb131e7ee?branch=pr775-checkpolicy-revdeps
Log:
do not test services which are not available
Many tests contain test phases called "real scenario". Purpose of
these phases is usually to test a service which belongs to a particular
package. If the service (systemd unit file) is not available for any
reason, it makes no sense to run the test phase - it would fail.
Other test phases may still be worth running.
---
diff --git a/selinux-policy/ModemManager-and-similar/runtest.sh b/selinux-policy/ModemManager-and-similar/runtest.sh
index 4ad9eb0..266f354 100755
--- a/selinux-policy/ModemManager-and-similar/runtest.sh
+++ b/selinux-policy/ModemManager-and-similar/runtest.sh
@@ -76,13 +76,9 @@ rlJournalStart
fi
rlPhaseEnd
- if ! rlIsRHEL 5 ; then
+ DESTINATION="org.freedesktop.ModemManager1"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
- if rlIsRHEL 6 ; then
- DESTINATION="org.freedesktop.ModemManager"
- else
- DESTINATION="org.freedesktop.ModemManager1"
- fi
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null" 0,1
sleep 1
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
@@ -108,7 +104,9 @@ rlJournalStart
rlSEMatchPathCon "/usr/sbin/ModemManager" "modemmanager_exec_t"
rlSESearchRule "allow modemmanager_t sysfs_t : file { append write } [ ]"
rlPhaseEnd
+ fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "start status" 1
diff --git a/selinux-policy/accounts-daemon-and-similar/runtest.sh b/selinux-policy/accounts-daemon-and-similar/runtest.sh
index 662d1c6..f658bad 100755
--- a/selinux-policy/accounts-daemon-and-similar/runtest.sh
+++ b/selinux-policy/accounts-daemon-and-similar/runtest.sh
@@ -102,9 +102,9 @@ rlJournalStart
rlPhaseEnd
fi
- if ! rlIsRHEL 5 ; then
+ DESTINATION="org.freedesktop.Accounts"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
- DESTINATION="org.freedesktop.Accounts"
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null"
sleep 1
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
@@ -127,6 +127,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -143,6 +144,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/acpid-and-similar/runtest.sh b/selinux-policy/acpid-and-similar/runtest.sh
index b24fa65..5059ee2 100755
--- a/selinux-policy/acpid-and-similar/runtest.sh
+++ b/selinux-policy/acpid-and-similar/runtest.sh
@@ -106,6 +106,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -119,6 +120,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/blueman-and-similar/runtest.sh b/selinux-policy/blueman-and-similar/runtest.sh
index ee32cbb..a5910b6 100755
--- a/selinux-policy/blueman-and-similar/runtest.sh
+++ b/selinux-policy/blueman-and-similar/runtest.sh
@@ -83,9 +83,9 @@ rlJournalStart
rlSESearchRule "allow policykit_t blueman_t : dbus { send_msg }"
rlPhaseEnd
- if ! rlIsRHEL 5 ; then
+ DESTINATION="org.blueman.Mechanism"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
- DESTINATION="org.blueman.Mechanism"
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null"
sleep 1
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
diff --git a/selinux-policy/boltd-and-similar/runtest.sh b/selinux-policy/boltd-and-similar/runtest.sh
index 5e7ddb1..0115c59 100755
--- a/selinux-policy/boltd-and-similar/runtest.sh
+++ b/selinux-policy/boltd-and-similar/runtest.sh
@@ -109,14 +109,17 @@ rlJournalStart
rlSESearchRule "allow boltd_t xguest_t : dbus { send_msg } [ ]"
rlPhaseEnd
+ DESTINATION="org.freedesktop.bolt"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- system D-bus"
- DESTINATION="org.freedesktop.bolt"
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null"
sleep 2
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
rlRun "ps -efZ | grep -v grep | grep \"${PROCESS_CONTEXT}.*${PROCESS_NAME}\""
rlPhaseEnd
+ fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -130,6 +133,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartTest "real scenario -- confined users"
CREATED_USERS=""
diff --git a/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh b/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh
index d5df5ec..80100e4 100755
--- a/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh
+++ b/selinux-policy/bz481628-send-msg-to-dbus/runtest.sh
@@ -104,9 +104,11 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlSEService "nopassword" ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "reload status" 1
rlPhaseEnd
+ fi
if ! rlIsRHEL 5 6 7 ; then
rlPhaseStartTest "bz#1688671"
diff --git a/selinux-policy/bz538089-plymouth-operations-denied-during-boot/runtest.sh b/selinux-policy/bz538089-plymouth-operations-denied-during-boot/runtest.sh
index 8a67d47..e78bd69 100755
--- a/selinux-policy/bz538089-plymouth-operations-denied-during-boot/runtest.sh
+++ b/selinux-policy/bz538089-plymouth-operations-denied-during-boot/runtest.sh
@@ -159,7 +159,7 @@ rlJournalStart
rlPhaseEnd
fi
- if ! rlIsRHEL 5 6 ; then
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
diff --git a/selinux-policy/bz733494-amanda-and-similar/runtest.sh b/selinux-policy/bz733494-amanda-and-similar/runtest.sh
index 8360689..10c06e4 100755
--- a/selinux-policy/bz733494-amanda-and-similar/runtest.sh
+++ b/selinux-policy/bz733494-amanda-and-similar/runtest.sh
@@ -226,6 +226,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.socket ] ; then
rlPhaseStartTest "real scenario -- xinetd service"
HOST_ADDRESS="127.0.0.1"
PORT_NUMBER="10080" # number or socket path
@@ -258,6 +259,7 @@ rlJournalStart
rlRun "systemctl disable ${SERVICE_NAME}.socket"
fi
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/caddy-and-similar/runtest.sh b/selinux-policy/caddy-and-similar/runtest.sh
index ca34360..b970b6a 100755
--- a/selinux-policy/caddy-and-similar/runtest.sh
+++ b/selinux-policy/caddy-and-similar/runtest.sh
@@ -69,6 +69,7 @@ rlJournalStart
rlSESearchRule "allow httpd_t sysctl_net_t : file { getattr open read } [ ]"
rlPhaseEnd
+ if ls /usr/lib/systemd/system/caddy*.service ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "semanage fcontext -l -C | grep caddy"
for SERVICE_NAME in caddy caddy-api ; do
@@ -77,6 +78,7 @@ rlJournalStart
rlSEService - ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
done
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/cockpit-ws-and-similar/runtest.sh b/selinux-policy/cockpit-ws-and-similar/runtest.sh
index e111a41..4bb6c98 100755
--- a/selinux-policy/cockpit-ws-and-similar/runtest.sh
+++ b/selinux-policy/cockpit-ws-and-similar/runtest.sh
@@ -143,6 +143,7 @@ rlJournalStart
fi
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -156,6 +157,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartTest "bz#1402316 + bz#1402495"
rlSEMatchPathCon "/usr/libexec/cockpit-session" "cockpit_session_exec_t"
@@ -190,6 +192,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.socket ] ; then
rlPhaseStartTest "real scenario -- xinetd service"
HOST_ADDRESS="127.0.0.1" # IP address or nothing
PORT_NUMBER="9090" # number or socket path
@@ -221,6 +224,7 @@ rlJournalStart
rlRun "systemctl disable ${SERVICE_NAME}.socket"
fi
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/colord-and-similar/runtest.sh b/selinux-policy/colord-and-similar/runtest.sh
index ff2ced5..4d6970d 100755
--- a/selinux-policy/colord-and-similar/runtest.sh
+++ b/selinux-policy/colord-and-similar/runtest.sh
@@ -62,9 +62,9 @@ rlJournalStart
rlSESearchRule "allow colord_t systemd_hwdb_etc_t : file { getattr open read } [ ]"
rlPhaseEnd
- if ! rlIsRHEL 5 ; then
+ DESTINATION="org.freedesktop.ColorManager"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
- DESTINATION="org.freedesktop.ColorManager"
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null"
sleep 1
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
@@ -128,6 +128,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -141,6 +142,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
if rlIsFedora ; then
rlPhaseStartTest "bz#2259679"
diff --git a/selinux-policy/cups-browsed-and-similar/runtest.sh b/selinux-policy/cups-browsed-and-similar/runtest.sh
index f6235dd..0877fdc 100755
--- a/selinux-policy/cups-browsed-and-similar/runtest.sh
+++ b/selinux-policy/cups-browsed-and-similar/runtest.sh
@@ -71,6 +71,7 @@ rlJournalStart
rlSESearchRule "allow cupsd_t cupsd_tmp_t : lnk_file { create unlink } [ ]"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "echo -en '\nBrowsePoll localhost\n' >> /etc/cups/cups-browsed.conf"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
@@ -91,6 +92,7 @@ rlJournalStart
fi
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/cups-lpd-and-similar/runtest.sh b/selinux-policy/cups-lpd-and-similar/runtest.sh
index ede77b9..10aa060 100755
--- a/selinux-policy/cups-lpd-and-similar/runtest.sh
+++ b/selinux-policy/cups-lpd-and-similar/runtest.sh
@@ -102,6 +102,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.socket ] ; then
rlPhaseStartTest "real scenario -- bz#1919399 + bz#1947397"
rlRun "systemctl start cups.service"
rlRun "systemctl enable cups-lpd.socket"
@@ -115,7 +116,9 @@ rlJournalStart
rlRun "systemctl disable cups-lpd.socket"
rlRun "systemctl stop cups.service"
rlPhaseEnd
+ fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.socket ] ; then
rlPhaseStartTest "real scenario -- xinetd service"
HOST_ADDRESS="127.0.0.1" # IP address or nothing
PORT_NUMBER="515" # number or socket path
@@ -147,6 +150,7 @@ rlJournalStart
rlRun "systemctl disable ${SERVICE_NAME}.socket"
fi
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/dhcpcd-and-similar/runtest.sh b/selinux-policy/dhcpcd-and-similar/runtest.sh
index 6fcebba..2b532ad 100755
--- a/selinux-policy/dhcpcd-and-similar/runtest.sh
+++ b/selinux-policy/dhcpcd-and-similar/runtest.sh
@@ -117,7 +117,7 @@ rlJournalStart
rlPhase
fi
-
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
if ! rlIsRHEL "<9.5" ; then
rlRun "ip netns add test-ns"
@@ -136,6 +136,7 @@ rlJournalStart
rlRun "restorecon -Rv /etc /var /run -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/fapolicyd-and-similar/runtest.sh b/selinux-policy/fapolicyd-and-similar/runtest.sh
index 8b359e8..21e183b 100755
--- a/selinux-policy/fapolicyd-and-similar/runtest.sh
+++ b/selinux-policy/fapolicyd-and-similar/runtest.sh
@@ -102,6 +102,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -112,7 +113,9 @@ rlJournalStart
rlRun "restorecon -Rv /etc /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "RHEL-77071"
if rlIsCentOS 10 || rlIsRHEL 10 ; then
rlSESearchRule "allow fapolicyd_t systemd_machined_t : unix_stream_socket { connectto } [ ]"
@@ -125,6 +128,7 @@ rlJournalStart
rlRun "service fapolicyd stop"
rlRun "service systemd-machined stop"
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/fedora-third-party-and-similar/runtest.sh b/selinux-policy/fedora-third-party-and-similar/runtest.sh
index 7c136a9..bc6e4a3 100755
--- a/selinux-policy/fedora-third-party-and-similar/runtest.sh
+++ b/selinux-policy/fedora-third-party-and-similar/runtest.sh
@@ -70,6 +70,7 @@ rlJournalStart
rlSESearchRule "allow ${PROCESS_CONTEXT} passwd_file_t : file { getattr open read } [ ]"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
# for OSes where the SELinux domain does not exist yet
@@ -81,6 +82,7 @@ rlJournalStart
rlRun "fedora-third-party list"
rlSEService - ${SERVICE_NAME} - ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/firewalld-and-similar/runtest.sh b/selinux-policy/firewalld-and-similar/runtest.sh
index df7586f..496e8d0 100755
--- a/selinux-policy/firewalld-and-similar/runtest.sh
+++ b/selinux-policy/firewalld-and-similar/runtest.sh
@@ -183,15 +183,18 @@ rlJournalStart
rlRun "firewall-cmd --remove-port 1234/tcp --permanent"
rlPhaseEnd
+ DESTINATION="org.fedoraproject.FirewallD1"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
- DESTINATION="org.fedoraproject.FirewallD1"
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null"
sleep 1
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
rlRun "ps -efZ | grep -v grep | grep \"${PROCESS_CONTEXT}.*${PROCESS_NAME}\""
rlServiceStop "firewalld"
rlPhaseEnd
+ fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
rlRun "rm -rf /run/firewalld"
@@ -218,6 +221,7 @@ rlJournalStart
rlRun "ls -Z /run/xtables.lock | grep :iptables_var_run_t"
fi
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/fwupd-and-similar/runtest.sh b/selinux-policy/fwupd-and-similar/runtest.sh
index 7881022..eaf601a 100755
--- a/selinux-policy/fwupd-and-similar/runtest.sh
+++ b/selinux-policy/fwupd-and-similar/runtest.sh
@@ -75,9 +75,9 @@ rlJournalStart
rlPhaseEnd
fi
- if ! rlIsRHEL 5 ; then
+ DESTINATION="org.freedesktop.fwupd"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
- DESTINATION="org.freedesktop.fwupd"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
# RHEL-4, RHEL-5, RHEL-6 is excluded
PROCESS_CONTEXT="unconfined_service_t"
@@ -89,6 +89,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -99,6 +100,7 @@ rlJournalStart
rlRun "restorecon -Rv /etc /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
if rlSEDefined "fwupd_t" ; then
rlPhaseStartTest "bz#1772619"
diff --git a/selinux-policy/hostapd-and-similar/runtest.sh b/selinux-policy/hostapd-and-similar/runtest.sh
index c36d878..1ed5ed0 100755
--- a/selinux-policy/hostapd-and-similar/runtest.sh
+++ b/selinux-policy/hostapd-and-similar/runtest.sh
@@ -97,6 +97,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
rlRun "modprobe mac80211_hwsim"
@@ -119,6 +120,7 @@ rlJournalStart
sleep 5
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/icecast-and-similar/runtest.sh b/selinux-policy/icecast-and-similar/runtest.sh
index bbfa4d4..bcce208 100755
--- a/selinux-policy/icecast-and-similar/runtest.sh
+++ b/selinux-policy/icecast-and-similar/runtest.sh
@@ -95,6 +95,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- bz#894387"
if rlIsRHEL 5 6 ; then
rlRun "setsebool icecast_connect_any on"
@@ -123,6 +124,7 @@ rlJournalStart
rlRun "setsebool icecast_use_any_tcp_ports off"
fi
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/kerberos-and-similar/runtest.sh b/selinux-policy/kerberos-and-similar/runtest.sh
index c8b16a2..e306888 100755
--- a/selinux-policy/kerberos-and-similar/runtest.sh
+++ b/selinux-policy/kerberos-and-similar/runtest.sh
@@ -38,8 +38,7 @@ rlJournalStart
rlSESatisfyRequires
rlAssertRpm ${PACKAGE}
rlAssertRpm ${PACKAGE}-targeted
- rlAssertRpm krb5-libs
- rlAssertRpm krb5-server
+ rlRun "rpm -qa | grep krb | sort"
rlServiceStop kprop kadmin
rlFileBackup /etc/shadow
@@ -197,6 +196,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/kprop.service ] ; then
rlPhaseStartTest "real scenario for kpropd"
rlRun "mkdir -p /var/kerberos/krb5kdc"
rlRun "touch /var/kerberos/krb5kdc/kpropd.acl"
@@ -207,6 +207,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} kprop kpropd kpropd_t "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/logwatch-and-similar/runtest.sh b/selinux-policy/logwatch-and-similar/runtest.sh
index bb60374..a7dadf8 100755
--- a/selinux-policy/logwatch-and-similar/runtest.sh
+++ b/selinux-policy/logwatch-and-similar/runtest.sh
@@ -74,6 +74,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "mkdir -p /var/cache/logwatch"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -84,6 +85,7 @@ rlJournalStart
rlRun "restorecon -Rv /etc /var /run -e /var/ARTIFACTS" 0-255
rlSEService - ${SERVICE_NAME} - ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.timer ] ; then
rlPhaseStartTest "real scenario -- timer"
diff --git a/selinux-policy/nasd-and-similar/runtest.sh b/selinux-policy/nasd-and-similar/runtest.sh
index 8f312ca..fe86100 100755
--- a/selinux-policy/nasd-and-similar/runtest.sh
+++ b/selinux-policy/nasd-and-similar/runtest.sh
@@ -80,6 +80,7 @@ rlJournalStart
rlSESearchRule "type_transition ${SOURCE_TYPE} ${FILE_CONTEXT} : process ${PROCESS_CONTEXT} $BOOLEANS"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -92,6 +93,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/nfsdcld-and-similar/runtest.sh b/selinux-policy/nfsdcld-and-similar/runtest.sh
index 51b1b9f..b6e8ad4 100755
--- a/selinux-policy/nfsdcld-and-similar/runtest.sh
+++ b/selinux-policy/nfsdcld-and-similar/runtest.sh
@@ -63,6 +63,7 @@ rlJournalStart
rlSESearchRule "allow rpcd_t nfsd_fs_t : file { getattr open read } [ ]"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -72,6 +73,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/numad-and-similar/runtest.sh b/selinux-policy/numad-and-similar/runtest.sh
index 77c1b8e..52cbe64 100755
--- a/selinux-policy/numad-and-similar/runtest.sh
+++ b/selinux-policy/numad-and-similar/runtest.sh
@@ -104,6 +104,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "mkdir -p ${MOUNT_POINT}"
if ! mount | grep -q "cgroup.*cpuset" ; then
@@ -117,6 +118,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/policykit-general/runtest.sh b/selinux-policy/policykit-general/runtest.sh
index 32a2c6b..79fa26e 100755
--- a/selinux-policy/policykit-general/runtest.sh
+++ b/selinux-policy/policykit-general/runtest.sh
@@ -95,11 +95,13 @@ rlJournalStart
rlSEMatchPathCon "/usr/libexec/polkit-1/polkitd" "policykit_exec_t"
rlSESearchRule "allow policykit_t fs_t : filesystem { getattr }"
rlPhaseEnd
+ fi
+ DESTINATION="org.freedesktop.PolicyKit1"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
rlRun "killall polkitd" 0,1
sleep 1
- DESTINATION="org.freedesktop.PolicyKit1"
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null"
sleep 1
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
@@ -133,7 +135,7 @@ rlJournalStart
rlPhaseEnd
fi
- if ! rlIsRHEL 5 6 ; then
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -147,6 +149,7 @@ rlJournalStart
rlRun "restorecon -Rv /var /run -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartTest "real scenario -- confined users"
CREATED_USERS=""
@@ -166,7 +169,6 @@ rlJournalStart
rlRun "userdel -rfZ ${USER_NAME}"
done
rlPhaseEnd
- fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/rngd-and-similar/runtest.sh b/selinux-policy/rngd-and-similar/runtest.sh
index ca55d19..1987510 100755
--- a/selinux-policy/rngd-and-similar/runtest.sh
+++ b/selinux-policy/rngd-and-similar/runtest.sh
@@ -155,6 +155,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
rlRun "modprobe tpm-rng" 0,1
@@ -183,6 +184,7 @@ rlJournalStart
rlRun "grep ^RNGD_ARGS= /etc/sysconfig/rngd"
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 2
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/rpc.idmapd-and-similar/runtest.sh b/selinux-policy/rpc.idmapd-and-similar/runtest.sh
index e79d688..10fed7c 100755
--- a/selinux-policy/rpc.idmapd-and-similar/runtest.sh
+++ b/selinux-policy/rpc.idmapd-and-similar/runtest.sh
@@ -70,6 +70,7 @@ rlJournalStart
rlSESearchRule "type_transition ${SOURCE_TYPE} ${FILE_CONTEXT} : process ${PROCESS_CONTEXT} $BOOLEANS"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -80,6 +81,7 @@ rlJournalStart
rlRun "restorecon -Rv /var /run -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/rpmdb-and-similar/runtest.sh b/selinux-policy/rpmdb-and-similar/runtest.sh
index dda6a92..e0c0b55 100755
--- a/selinux-policy/rpmdb-and-similar/runtest.sh
+++ b/selinux-policy/rpmdb-and-similar/runtest.sh
@@ -66,6 +66,7 @@ rlJournalStart
rlSESearchRule "allow rpmdb_t user_devpts_t : chr_file { read write } [ ]"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "touch /var/lib/rpm/.rebuilddb"
rlSEService - ${SERVICE_NAME} - ${PROCESS_CONTEXT} "start status" 1
@@ -73,6 +74,7 @@ rlJournalStart
rlRun "touch /var/lib/rpm/.rebuilddb"
rlSEService - ${SERVICE_NAME} - ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartTest "rpmdb executed by root/unconfined_t"
rlRun "restorecon -Rv /var/lib/rpm"
diff --git a/selinux-policy/rrdcached-service-and-related/runtest.sh b/selinux-policy/rrdcached-service-and-related/runtest.sh
index b6dfec0..aa774dd 100755
--- a/selinux-policy/rrdcached-service-and-related/runtest.sh
+++ b/selinux-policy/rrdcached-service-and-related/runtest.sh
@@ -84,11 +84,13 @@ rlJournalStart
rlSESearchRule "typeattribute ${PROCESS_CONTEXT} syslog_client_type"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlSEService - ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "start status" 2
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService - ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 2
rlPhaseEnd
+ fi
# TODO: add test scenario for rrdcached.socket
diff --git a/selinux-policy/rtkit-daemon-and-similar/runtest.sh b/selinux-policy/rtkit-daemon-and-similar/runtest.sh
index b618d26..855902c 100755
--- a/selinux-policy/rtkit-daemon-and-similar/runtest.sh
+++ b/selinux-policy/rtkit-daemon-and-similar/runtest.sh
@@ -76,9 +76,9 @@ rlJournalStart
rlPhaseEnd
fi
- if ! rlIsRHEL 5 ; then
+ DESTINATION="org.freedesktop.RealtimeKit1"
+ if busctl | grep -iq ${DESTINATION} ; then
rlPhaseStartTest "real scenario -- DBus service"
- DESTINATION="org.freedesktop.RealtimeKit1"
rlRun "gdbus introspect --system --object-path / --dest ${DESTINATION} >& /dev/null"
sleep 1
rlRun "ps -efZ | grep -v grep | grep ${PROCESS_NAME}"
@@ -97,7 +97,7 @@ rlJournalStart
rlPhaseEnd
fi
- if ! rlIsRHEL 5 6 ; then
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
diff --git a/selinux-policy/sslh-and-similar/runtest.sh b/selinux-policy/sslh-and-similar/runtest.sh
index 0ff50e0..90a231a 100755
--- a/selinux-policy/sslh-and-similar/runtest.sh
+++ b/selinux-policy/sslh-and-similar/runtest.sh
@@ -88,6 +88,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
rlRun "sed -i 's/thelonious/localhost/' /etc/sslh.cfg"
@@ -99,6 +100,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/stalld-and-similar/runtest.sh b/selinux-policy/stalld-and-similar/runtest.sh
index 4f712cb..eebb2dd 100755
--- a/selinux-policy/stalld-and-similar/runtest.sh
+++ b/selinux-policy/stalld-and-similar/runtest.sh
@@ -117,6 +117,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
PROCESS_CONTEXT="unconfined_service_t"
@@ -134,6 +135,7 @@ rlJournalStart
rlRun "setsebool domain_can_write_kmsg off"
rlRun "diff before.txt after.txt | grep -i -e 'operation not permitted' -e 'permission denied'" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/sulogin-and-similar/runtest.sh b/selinux-policy/sulogin-and-similar/runtest.sh
index 073d423..2a52952 100755
--- a/selinux-policy/sulogin-and-similar/runtest.sh
+++ b/selinux-policy/sulogin-and-similar/runtest.sh
@@ -23,6 +23,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/rescue.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "grep ExecStart= /usr/lib/systemd/system/rescue.service"
rlRun "strings /usr/lib/systemd/systemd-sulogin-shell | grep bin/sulogin"
@@ -33,6 +34,7 @@ rlJournalStart
sleep 2
rlRun "service rescue status" 3
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/synce4l-and-similar/runtest.sh b/selinux-policy/synce4l-and-similar/runtest.sh
index a0be444..fefa8f7 100755
--- a/selinux-policy/synce4l-and-similar/runtest.sh
+++ b/selinux-policy/synce4l-and-similar/runtest.sh
@@ -63,6 +63,7 @@ rlJournalStart
rlSESearchRule "type_transition ${SOURCE_TYPE} ${FILE_CONTEXT} : process ${PROCESS_CONTEXT} $BOOLEANS"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
if grep -q _cmd /etc/synce4l.conf ; then
rlRun "sed -i 's/^\(.*_cmd\) .*$/\1 echo 0/' /etc/synce4l.conf"
@@ -76,6 +77,7 @@ rlJournalStart
rlRun "restorecon -Rv /var /run -e /var/ARTIFACTS" 0-255
rlSEService - ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/systemd-bootchart-and-similar/runtest.sh b/selinux-policy/systemd-bootchart-and-similar/runtest.sh
index 7c41cc4..c650b15 100755
--- a/selinux-policy/systemd-bootchart-and-similar/runtest.sh
+++ b/selinux-policy/systemd-bootchart-and-similar/runtest.sh
@@ -75,6 +75,7 @@ rlJournalStart
rlSESearchRule "allow syslogd_t systemd_bootchart_tmpfs_t : file { getattr read write map } [ ]"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -84,6 +85,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/systemd-localed/runtest.sh b/selinux-policy/systemd-localed/runtest.sh
index 5292292..579438d 100755
--- a/selinux-policy/systemd-localed/runtest.sh
+++ b/selinux-policy/systemd-localed/runtest.sh
@@ -27,7 +27,9 @@ rlJournalStart
rlSEMatchPathCon "/etc/X11/xorg.conf.d" "xserver_etc_t"
rlSESearchRule "allow systemd_localed_t xserver_etc_t : dir { create } [ ]"
rlPhaseEnd
+ fi
+ if [ -f /usr/lib/systemd/system/systemd-localed.service ] ; then
rlPhaseStartTest "real scenario -- bz#2240159"
if [ -d /etc/X11/xorg.conf.d ] ; then
rlRun "rpm -qf /etc/X11/xorg.conf.d" 0,1
diff --git a/selinux-policy/systemd-machined-and-similar/runtest.sh b/selinux-policy/systemd-machined-and-similar/runtest.sh
index 0894522..4fa2ecf 100755
--- a/selinux-policy/systemd-machined-and-similar/runtest.sh
+++ b/selinux-policy/systemd-machined-and-similar/runtest.sh
@@ -128,6 +128,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
PROCESS_CONTEXT="unconfined_service_t"
@@ -136,6 +137,7 @@ rlJournalStart
rlRun "restorecon -Rv /etc /run /var -e /var/ARTIFACTS" 0-255
rlSEService - ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartTest "real scenario -- bz#1900869 + bz#1900888"
rlRun "mkdir -pZ /var/lib/machines/test"
diff --git a/selinux-policy/systemd-modules-load-and-similar/runtest.sh b/selinux-policy/systemd-modules-load-and-similar/runtest.sh
index 616028f..455b6b1 100755
--- a/selinux-policy/systemd-modules-load-and-similar/runtest.sh
+++ b/selinux-policy/systemd-modules-load-and-similar/runtest.sh
@@ -104,6 +104,7 @@ rlJournalStart
rlSESearchRule "allow systemd_resolved_t efivarfs_t : file { getattr open read } [ ]"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
if ! rlIsRHEL "<9.6" ; then
rlRun "mkdir -p /run/modprobe.d"
@@ -121,6 +122,7 @@ rlJournalStart
rlRun "rm -f /etc/modules-load.d/${KERNEL_MODULE}.conf"
rlRun "rm -f /run/modprobe.d/test.conf"
rlPhaseEnd
+ fi
if modinfo `grep ^ib /etc/rdma/modules/rdma.conf` >& /dev/null ; then
rlPhaseStartTest "bz#1942267"
diff --git a/selinux-policy/systemd-rfkill-and-similar/runtest.sh b/selinux-policy/systemd-rfkill-and-similar/runtest.sh
index b92186f..bfdc75c 100755
--- a/selinux-policy/systemd-rfkill-and-similar/runtest.sh
+++ b/selinux-policy/systemd-rfkill-and-similar/runtest.sh
@@ -112,6 +112,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -125,6 +126,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/systemd-sysctl-and-similar/runtest.sh b/selinux-policy/systemd-sysctl-and-similar/runtest.sh
index 3cec638..5fd8104 100755
--- a/selinux-policy/systemd-sysctl-and-similar/runtest.sh
+++ b/selinux-policy/systemd-sysctl-and-similar/runtest.sh
@@ -75,11 +75,13 @@ rlJournalStart
fi
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlSEService - ${SERVICE_NAME} - ${PROCESS_CONTEXT} "start status" 1
rlRun "restorecon -Rv /etc /run /var -e /var/ARTIFACTS" 0-255
rlSEService - ${SERVICE_NAME} - ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/systemd-userdbd-and-similar/runtest.sh b/selinux-policy/systemd-userdbd-and-similar/runtest.sh
index 3120cf3..764eb6b 100755
--- a/selinux-policy/systemd-userdbd-and-similar/runtest.sh
+++ b/selinux-policy/systemd-userdbd-and-similar/runtest.sh
@@ -100,6 +100,7 @@ rlJournalStart
rlRun "setsebool ssh_sysadm_login off"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -109,7 +110,9 @@ rlJournalStart
rlRun "restorecon -Rv /etc /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.socket ] ; then
rlPhaseStartTest "real scenario -- ${SERVICE_NAME}.socket"
rlRun "systemctl stop systemd-userdbd.socket"
rlRun "systemctl status systemd-userdbd.socket" 3
@@ -118,6 +121,7 @@ rlJournalStart
rlRun "ls -dZ /run/systemd/userdb | grep :systemd_userdbd_runtime_t"
rlRun "ls -Z /run/systemd/userdb/io.systemd.Multiplexer | grep :systemd_userdbd_runtime_t"
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/targetd-and-similar/runtest.sh b/selinux-policy/targetd-and-similar/runtest.sh
index 2c11ecb..ff7dc99 100755
--- a/selinux-policy/targetd-and-similar/runtest.sh
+++ b/selinux-policy/targetd-and-similar/runtest.sh
@@ -166,6 +166,7 @@ rlJournalStart
rlSESearchRule "allow targetd_t sysctl_net_t : file { getattr open read } [ ]"
rlPhaseEnd
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "rm -f /etc/target/saveconfig.json"
rlRun "rm -f /etc/target/targetd.yaml"
@@ -194,6 +195,7 @@ rlJournalStart
rlRun "losetup -d ${LOOP_DEVICE}"
rlRun "rm -f ${LOOP_FILE}"
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/thttpd-and-similar/runtest.sh b/selinux-policy/thttpd-and-similar/runtest.sh
index 860d5c7..dcd0776 100755
--- a/selinux-policy/thttpd-and-similar/runtest.sh
+++ b/selinux-policy/thttpd-and-similar/runtest.sh
@@ -84,6 +84,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
# because of the fowner capability
rlRun "setsebool httpd_run_stickshift on"
@@ -97,6 +98,7 @@ rlJournalStart
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlRun "setsebool httpd_run_stickshift off"
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/usbguard-daemon-and-similar/runtest.sh b/selinux-policy/usbguard-daemon-and-similar/runtest.sh
index e50df2c..94fc163 100755
--- a/selinux-policy/usbguard-daemon-and-similar/runtest.sh
+++ b/selinux-policy/usbguard-daemon-and-similar/runtest.sh
@@ -77,6 +77,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario -- standalone service"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
rlRun "semodule -lfull | grep usbguard"
@@ -88,6 +89,7 @@ rlJournalStart
rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
diff --git a/selinux-policy/usbmuxd-and-similar/runtest.sh b/selinux-policy/usbmuxd-and-similar/runtest.sh
index 57bd228..76928a7 100755
--- a/selinux-policy/usbmuxd-and-similar/runtest.sh
+++ b/selinux-policy/usbmuxd-and-similar/runtest.sh
@@ -99,6 +99,7 @@ rlJournalStart
rlPhaseEnd
fi
+ if [ -f /usr/lib/systemd/system/${SERVICE_NAME}.service ] ; then
rlPhaseStartTest "real scenario"
rlRun "echo ${ROOT_PASSWORD} | passwd --stdin root"
if ! rlSEDefined ${PROCESS_CONTEXT} ; then
@@ -108,6 +109,7 @@ rlJournalStart
rlRun "restorecon -Rv /var /run -e /var/ARTIFACTS" 0-255
rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1
rlPhaseEnd
+ fi
rlPhaseStartCleanup
sleep 2
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-09-11 13:23 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-09-11 13:23 [tests/selinux] pr775-checkpolicy-revdeps: do not test services which are not available Milos Malik
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox