diff --git a/selinux-policy/systemd-timesyncd-and-similar/runtest.sh b/selinux-policy/systemd-timesyncd-and-similar/runtest.sh index f9b1b7f..66f114f 100755 --- a/selinux-policy/systemd-timesyncd-and-similar/runtest.sh +++ b/selinux-policy/systemd-timesyncd-and-similar/runtest.sh @@ -102,12 +102,14 @@ rlJournalStart rlSESearchRule "allow systemd_timedated_t efivarfs_t : file { getattr open read } [ ]" rlPhaseEnd + if ! rlIsRHEL '<9' ; then rlPhaseStartTest "bz#1949315" rlSEMatchPathCon "/" "root_t" rlSEMatchPathCon "/run" "var_run_t" rlSESearchRule "allow systemd_timedated_t root_t : dir { watch } [ ]" rlSESearchRule "allow systemd_timedated_t var_run_t : dir { watch } [ ]" rlPhaseEnd + fi if systemctl list-units | grep -q ${SERVICE_NAME} ; then rlPhaseStartTest "real scenario -- standalone service"