On Fri, May 8, 2020 at 11:42 AM Stephen Smalley <stephen.smalley.work@xxxxxxxxx> wrote: > > Update the selinux testsuite to work on Debian and provide > instructions for building and running it there. NB With this series applied and the separate quotastest fix, I was able to also run the testsuite on Ubuntu 20.04. On Ubuntu I had to build upstream libbpf from source because libbpf-dev was not packaged in Ubuntu unlike Debian (https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1836708). The Ubuntu kernel had two test failures: mmap/test (Wstat: 0 Tests: 39 Failed: 1) Failed test: 2 checkreqprot/test (Wstat: 0 Tests: 1 Failed: 1) Failed test: 1 These were both due to kernel configuration in their stock kernel: CONFIG_LSM_MMAP_MIN_ADDR=0 CONFIG_SECURITY_SELINUX_CHECKREQPROT_VALUE=1 The latter isn't too surprising since it used to be the default and likely just got carried forward in newer kernel configs. The former is rather odd; not sure how that happened.