When this test in run via restraint (e.g. on Beaker), it inherits some file descriptors originating from it, labeled unconfined_service_t. This leads to a huge amount of denials when test programs are exectuted. To work around this, add a rule to the policy that allows the test domains to inherit these descriptors from unconfined_service_t. Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com> |
||
|---|---|---|
| .. | ||
| avc_tracepoint | ||
| genfs_fallback | ||
| labeled-cephfs | ||
| netlabel_many_ifaces | ||
| selinux-testsuite | ||
| setsebool-deadlock | ||
| synflood | ||
| wrong-rules-after-setsebool | ||