The rlImport command fails in many tests because the epel-release
package is not available for RHEL-10 or CentOS-stream-10 yet.
As a workaround, an additional exit code 1 is accepted now.
The sedispol tool recognizes several commands. Before the checkpolicy
version 3.6 was introduced, one of the commands was 'u' which displayed
unknown handling setting. With the new version, the 'u' command prints
SELinux users which are defined and the 'U' command displays the unknown
handling setting.
Since SELinux user-space 3.6 was introduced, the sedismod and sedispol
programs are able to perform various actions non-interactively when
the following options are supplied: -a, --actions. In previous versions,
these actions were only usable in the interactive mode.
From now on, the automated test also covers these options.
The SELinux beaker library calls the yum/dnf command and the
"--skip-broken" option is placed before the "install" word on the
command line. Such command line executed on Fedora rawhide leads to
the following error message:
Unknown argument "--skip-broken" for command "dnf5". Add "--help" for
more information about the arguments.
In order to work around this issue, the "install" word was moved before
the rest of options. Manual testing revealed that this approach works
on Fedora rawhide.
For unknown reasons, selinux-policy-{minimum,mls,targeted} packages
are not installed or their available versions differ from each other.
Let's work around the issue.
For unknown reason, the selinux-policy-mls package is not installed
before execution of the TC, even though it it a required package.
From now on, the TC will install the package explicitely.
Commit 769880f7 added path meta data into .fmf files. As path's didn't have /
at the beginning test were not created correctly.
Fixes:
fatal: [fedora29]: FAILED! => {
"msg": [
"Tests failed: True",
"Tests msg: FAIL selinuxselinux-policy/policy-rpm-macros",
"FAIL selinuxcheckpolicy/checkpolicy",
"FAIL selinuxlibsepol/sepol_check_context",
"FAIL selinuxlibsemanage/verify-options-in-semanage-conf",
...
$ cat artifacts/FAIL_selinuxcheckpolicy-checkpolicy.log
FAIL test selinuxcheckpolicy/checkpolicy does not appear to be a file or directory
Commit 769880f7 added path meta data into .fmf files. As path's didn't have /
at the beginning test were not created correctly.
Fixes:
fatal: [fedora29]: FAILED! => {
"msg": [
"Tests failed: True",
"Tests msg: FAIL selinuxselinux-policy/policy-rpm-macros",
"FAIL selinuxcheckpolicy/checkpolicy",
"FAIL selinuxlibsepol/sepol_check_context",
"FAIL selinuxlibsemanage/verify-options-in-semanage-conf",
...
$ cat artifacts/FAIL_selinuxcheckpolicy-checkpolicy.log
FAIL test selinuxcheckpolicy/checkpolicy does not appear to be a file or directory
This adds an initial set of test metadata using the Flexible Metadata
Format for experimenting. This should allow us to more easily execute
relevant test coverage for all selinux-related components. Example:
fmf --key test --filter 'tags:Tier1'
fmf --key test --filter 'component:libselinux'
fmf --key test --filter 'component:libselinux | tags:Tier1'
See https://github.com/psss/fmf for more details about the FMF format.
