On 5/14/2018 4:48 PM, Stephen Smalley wrote:
It's been running fine for me. Maybe you just need
to clean your tree and do a fresh make test.
Did that first thing.
Digging down, I find that the "make -C policy load" is failing.
make[1]: Leaving directory '/home/cschaufler/SELinux/selinux-testsuite/policy/test_policy'
# General policy load
/usr/sbin/semodule -i test_policy/test_policy.pp
neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:4703
(neverallow base_typeattr_6 base_typeattr_7 (process (fork transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit)))
<root>
allow at /var/lib/selinux/targeted/tmp/modules/400/test_policy/cil:2565
(allow test_create_no_t unconfined_t (process (sigchld)))
<root>
allow at /var/lib/selinux/targeted/tmp/modules/400/test_policy/cil:2569
(allow test_create_no_t self (process (transition sigchld sigkill sigstop signull signal ptrace getsched setsched getsession getpgid setpgid getcap setcap share getattr setexec setfscreate noatsecure siginh setrlimit rlimitinh dyntransition setcurrent execmem execstack execheap setkeycreate setsockcreate getrlimit)))
<root>
allow at /var/lib/selinux/targeted/tmp/modules/400/test_policy/cil:2606
(allow test_create_no_t self (process (setexec)))
<root>
allow at /var/lib/selinux/targeted/tmp/modules/400/test_policy/cil:2634
(allow test_create_d sysadm_t (process (sigchld)))
I bet the reason it's doing this is obvious. Just not to me.
Has anyone
had success with the SELinux test suite on Fedora 28?
I find the chcon and newrole are unhappy with the contexts
used
in the suite.
|
