caa904c01f
Whenever a key is defined in the tmt hierarchy and some child also defines that key, the child's will overwrite the previous one. The "+" changes the operation to "append", so the content of key+ in the child is added to the existing key. Meaning that any "adjust" statement in a test plan using a test that defines it's own "adjust:" is ignored. Since we are expecting other statements to be appended to the "adjust" sections, the content of each section needs to be a single list item as opposed to a set of key-value pairs (first line needs to start with a hyphen). - Replace all "adjust:" sections with "adjust+:" in order to honor any adjustments further up the tree (parent tests, or test plans). - Fix malformed "adjust" sections (sets of key-value pairs) Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
31 lines
750 B
Text
31 lines
750 B
Text
summary: Harden tools to avoid loading of unchecked python modules.
|
|
description: Tools like semanage must be hardened to avoid loading rogue python modules that could lead to unexpected failures.
|
|
contact: Amith Kumar <apeetham@redhat.com>
|
|
component:
|
|
- policycoreutils
|
|
test: ./runtest.sh
|
|
framework: beakerlib
|
|
recommend:
|
|
- policycoreutils
|
|
- /usr/sbin/semanage
|
|
duration: 1m
|
|
enabled: true
|
|
tag:
|
|
- CI-Tier-1
|
|
- NoRHEL4
|
|
- NoRHEL5
|
|
- NoRHEL6
|
|
- TIPpass_Security
|
|
- TierCandidatesPASS
|
|
- f32friendly
|
|
- f33friendly
|
|
- targeted
|
|
- avoidImageMode
|
|
tier: 1
|
|
link:
|
|
- relates: https://bugzilla.redhat.com/show_bug.cgi?id=2128976
|
|
adjust+:
|
|
- enabled: false
|
|
when: distro == rhel-4, rhel-5, rhel-6
|
|
continue: false
|
|
extra-nitrate: TC#0614726
|