On Thu, Sep 30, 2021 at 1:26 PM Ondrej Mosnacek <omosnace@xxxxxxxxxx> wrote: > The lockdown class is about to be removed from the mainline kernel due > to the difficulty of ensuring that a relevant subject context is > available during each call to the locked_down hook. > > Hence remove the lockdown test from the testsuite. > > Note that the module_load and perf_event test policy still conditionally > provides rules involving the lockdown class so that these tests can > still work on older kernels. > > Signed-off-by: Ondrej Mosnacek <omosnace@xxxxxxxxxx> The removal is now merged in next, so I went ahead and applied this: https://github.com/SELinuxProject/selinux-testsuite/commit/bba37c007a0c7a12dd603bdac5e4431796f3e2e1 -- Ondrej Mosnacek Software Engineer, Linux Security - SELinux kernel Red Hat, Inc.