selinux/kernel/sysctl-avcs/main.fmf
Ondrej Mosnacek a011b35f36
Add a test for unexpected denials from sysctl -a
Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
2026-03-12 13:22:29 +01:00

22 lines
634 B
Text

summary: Test for unexpected denials from sysctl -a
description: |
Verifes that running sysctl -a doesn't trigger unexpected capability
checks that would result in AVC denials even when access is allowed.
contact: Ondrej Mosnacek <omosnace@redhat.com>
component:
- kernel
framework: beakerlib
require:
- selinux-policy-devel
duration: 10m
tier: 2
check:
- avc
enabled: true
adjust+:
- enabled: false
when: distro < rhel-9
because: RHEL-8 and below are not worth supporting by this test
link:
- verifies: https://issues.redhat.com/browse/RHEL-135610
- verifies: https://issues.redhat.com/browse/RHEL-145590