On Tue, May 15, 2018 at 10:50 AM, Casey Schaufler <casey@xxxxxxxxxxxxxxxx> wrote: > On 5/15/2018 5:28 AM, Stephen Smalley wrote: >> On 05/14/2018 08:10 PM, Casey Schaufler wrote: >>> On 5/14/2018 4:48 PM, Stephen Smalley wrote: >>>> It's been running fine for me. Maybe you just need to clean your tree and do a fresh make test. >>> Did that first thing. >>> >>> Digging down, I find that the "make -C policy load" is failing. >>> >>> make[1]: Leaving directory '/home/cschaufler/SELinux/selinux-testsuite/policy/test_policy' >>> # General policy load >>> <snip> >>> I bet the reason it's doing this is obvious. Just not to me. >> Add or uncomment expand-check = 0 in /etc/selinux/semanage.conf. >> That's noted in the README but used to be the default in Fedora (changed in 28). > > Yup, that did the trick. Thank you. > > I suggest that you move the note about expand-check up from "Running the Tests" > into "Userland and Base Policy". With the Fedora 28 change it's much more likely > to be an issue. Let's just add a check to the Makefile before we attempt to load the policy. People are more likely to notice a meaningful error message than they are instructions in the docs. Check the patch I just sent to the list. -- paul moore www.paul-moore.com
