samba-mirror

mirror of https://github.com/samba-team/samba.git synced 2025-01-18 06:04:06 +03:00

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

tests/ntacls: unblock failing gitlab pipelines because test_setntacl_forcenative This expects PermissionError: [Errno 1] Operation not permitted, but it seems that setxattr() for security.NTACL works on gitlab runners without being root. Signed-off-by: Stefan Metzmacher <metze@samba.org> Reviewed-by: Andrew Bartlett <abartlet@samba.org> (cherry picked from commit 237d9d0228cfed6d2e08b41b888d30aac5ab89e3) 2024-05-08 18:03:54 +02:00			`# gitlab runners with kernel 5.15.109+`
			`# allow setxattr() on security.NTACL`
			`#`
			`# It's not clear in detail why there's a difference`
			`# between various systems, one reason could be that`
			`# with selinux inode_owner_or_capable() is used to check`
			`# setxattr() permissions:`
			`# it checks for the fileowner too, as well as CAP_FOWNER.`
			`# Otherwise cap_inode_setxattr() is used, which checks for`
			`# CAP_SYS_ADMIN.`
			`#`
			`# But the kernel doesn't have selinux only apparmor...`
			`#`
			`# test_setntacl_forcenative expects`
			`# PermissionError: [Errno 1] Operation not permitted`
			`#`
			`# So for now we allow this to fail...`
			`^samba.tests.ntacls.samba.tests.ntacls.NtaclsTests.test_setntacl_forcenative.none`