The selinux shared tests
- Shell 57.1%
- Makefile 23.9%
- C 18.5%
- Python 0.4%
- Perl 0.1%
Allow the sys_resource capability to each domain which is allowed to execute generic programs in system bin directories without domain transition when the coreutils_bin_sys_resource tunable is on. If the tunable is off, which is the default state, the capability is dontaudited instead. This test was nout counting with dontaudit rule beforehand. No avc will be present if the tunable is off. |
||
|---|---|---|
| .fmf | ||
| checkpolicy | ||
| kernel | ||
| libselinux | ||
| libsemanage | ||
| libsepol | ||
| mcstrans | ||
| other | ||
| plans | ||
| policycoreutils | ||
| selinux-policy | ||
| setools | ||
| setroubleshoot/independent-on-initscripts | ||
| main.fmf | ||
| README.md | ||
SELinux tests
This repository contains set of test for SELinux kernel, userspace and policy. Tests are written using beakerlib with TMT Metadata Specification.
Gating Guidelines
Test tiers define a test's priority for our gating process.
tier: 1: Critical tests that must pass for any code merge.tier: 2: Important but non-critical tests.tier: 3: Non-critical tests.
All other tier metadata (e.g., tag:Tier1) is now deprecated.
Plans
$ tmt plans
Found 5 plans: /plans/ci, /plans/reboot, /plans/tier1, /plans/tier2 and /plans/tier3.
Usage
Run tier1 on localhost:
# tmt run provision -h local prepare plans -n /plans/tier1 discover execute
# tmt run -l report -h display -v