The attach_queue permission was introduced later than the tun_socket class itself. So check for that instead of the class, since the policy fails to build without it. Fixes: 4e0f6d5a52d2 ("selinux-testsuite: Add TUN/TAP driver tests") Signed-off-by: Ondrej Mosnacek <omosnace@xxxxxxxxxx> --- policy/Makefile | 2 +- tests/Makefile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/policy/Makefile b/policy/Makefile index f0de669..909594a 100644 --- a/policy/Makefile +++ b/policy/Makefile @@ -101,7 +101,7 @@ ifeq ($(shell grep -q module_load $(POLDEV)/include/support/all_perms.spt && ech TARGETS+=test_module_load.te endif -ifeq ($(shell grep -q tun_socket $(POLDEV)/include/support/all_perms.spt && echo true),true) +ifeq ($(shell grep -q attach_queue $(POLDEV)/include/support/all_perms.spt && echo true),true) TARGETS += test_tun_tap.te endif diff --git a/tests/Makefile b/tests/Makefile index 9a890be..45c9885 100644 --- a/tests/Makefile +++ b/tests/Makefile @@ -79,7 +79,7 @@ SUBDIRS+=module_load endif endif -ifeq ($(shell grep -q tun_socket $(POLDEV)/include/support/all_perms.spt && echo true),true) +ifeq ($(shell grep -q attach_queue $(POLDEV)/include/support/all_perms.spt && echo true),true) SUBDIRS += tun_tap endif -- 2.23.0