mirror of
https://github.com/systemd/systemd.git
synced 2024-10-28 03:25:31 +03:00
01da74243d
Since the test suite overhaul, the test units are now under /usr/lib/systemd/tests/testdata/tetsuite-06.units with system_u:object_r:lib_t context. This causes an AVC denial, since the systemd unit files are expected to have the system_u:object_r:systemd_unit_file_t context. Let's fix this by using a custom file context definition.
50 lines
1.5 KiB
Bash
Executable File
50 lines
1.5 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -e
|
|
TEST_DESCRIPTION="SELinux tests"
|
|
IMAGE_NAME="selinux"
|
|
TEST_NO_NSPAWN=1
|
|
|
|
# Requirements:
|
|
# Fedora 23
|
|
# selinux-policy-targeted
|
|
# selinux-policy-devel
|
|
|
|
# Check if selinux-policy-devel is installed, and if it isn't bail out early instead of failing
|
|
test -f /usr/share/selinux/devel/include/system/systemd.if || exit 0
|
|
|
|
. $TEST_BASE_DIR/test-functions
|
|
SETUP_SELINUX=yes
|
|
KERNEL_APPEND="$KERNEL_APPEND selinux=1 security=selinux"
|
|
|
|
test_append_files() {
|
|
(
|
|
setup_selinux
|
|
local _modules_dir=/var/lib/selinux
|
|
rm -rf $1/$_modules_dir
|
|
if ! cp -ar $_modules_dir $1/$_modules_dir; then
|
|
dfatal "Failed to copy $_modules_dir"
|
|
exit 1
|
|
fi
|
|
|
|
local _policy_headers_dir=/usr/share/selinux/devel
|
|
rm -rf $1/$_policy_headers_dir
|
|
inst_dir /usr/share/selinux
|
|
if ! cp -ar $_policy_headers_dir $1/$_policy_headers_dir; then
|
|
dfatal "Failed to copy $_policy_headers_dir"
|
|
exit 1
|
|
fi
|
|
|
|
mkdir $1/systemd-test-module
|
|
cp systemd_test.te $1/systemd-test-module
|
|
cp systemd_test.if $1/systemd-test-module
|
|
cp systemd_test.fc $1/systemd-test-module
|
|
dracut_install -o sesearch
|
|
dracut_install runcon
|
|
dracut_install checkmodule semodule semodule_package m4 make load_policy sefcontext_compile
|
|
dracut_install -o /usr/libexec/selinux/hll/pp # Fedora/RHEL/...
|
|
dracut_install -o /usr/lib/selinux/hll/pp # Debian/Ubuntu/...
|
|
)
|
|
}
|
|
|
|
do_test "$@" 06
|