On 5/15/2018 2:08 PM, Paul Moore wrote: > On Tue, May 15, 2018 at 10:50 AM, Casey Schaufler > <casey@xxxxxxxxxxxxxxxx> wrote: >> On 5/15/2018 5:28 AM, Stephen Smalley wrote: >>> On 05/14/2018 08:10 PM, Casey Schaufler wrote: >>>> On 5/14/2018 4:48 PM, Stephen Smalley wrote: >>>>> It's been running fine for me. Maybe you just need to clean your tree and do a fresh make test. >>>> Did that first thing. >>>> >>>> Digging down, I find that the "make -C policy load" is failing. >>>> >>>> make[1]: Leaving directory '/home/cschaufler/SELinux/selinux-testsuite/policy/test_policy' >>>> # General policy load >>>> <snip> >>>> I bet the reason it's doing this is obvious. Just not to me. >>> Add or uncomment expand-check = 0 in /etc/selinux/semanage.conf. >>> That's noted in the README but used to be the default in Fedora (changed in 28). >> Yup, that did the trick. Thank you. >> >> I suggest that you move the note about expand-check up from "Running the Tests" >> into "Userland and Base Policy". With the Fedora 28 change it's much more likely >> to be an issue. > Let's just add a check to the Makefile before we attempt to load the > policy. People are more likely to notice a meaningful error message > than they are instructions in the docs. Check the patch I just sent > to the list. I think that will do just fine. Thank you.
