On 5/15/2018 5:28 AM, Stephen Smalley wrote: > On 05/14/2018 08:10 PM, Casey Schaufler wrote: >> On 5/14/2018 4:48 PM, Stephen Smalley wrote: >>> It's been running fine for me. Maybe you just need to clean your tree and do a fresh make test. >> Did that first thing. >> >> Digging down, I find that the "make -C policy load" is failing. >> >> make[1]: Leaving directory '/home/cschaufler/SELinux/selinux-testsuite/policy/test_policy' >> # General policy load >> <snip> >> I bet the reason it's doing this is obvious. Just not to me. > Add or uncomment expand-check = 0 in /etc/selinux/semanage.conf. > That's noted in the README but used to be the default in Fedora (changed in 28). Yup, that did the trick. Thank you. I suggest that you move the note about expand-check up from "Running the Tests" into "Userland and Base Policy". With the Fedora 28 change it's much more likely to be an issue.