On Mon, Jul 17, 2023 at 2:55 PM Stephen Smalley
<stephen.smalley.work@xxxxxxxxx> wrote:
>
> On Mon, Jul 17, 2023 at 8:28 AM Ondrej Mosnacek <omosnace@xxxxxxxxxx> wrote:
> >
> > The permissions are sometimes needed to resolve paths when running the
> > testsuite from a user/admin home directory. To avoid cluttering
> > individual policy files with macros that allow it, apply the macros to
> > the whole testsuite_domain attribute. Thankfully this doesn't break the
> > other tests.
> >
> > This also fixes the inet_socket test, which started to require these
> > permissions after a recent change.
> >
> > While there, also remove userdom_read_user_tmp_files() from
> > test_overlay_mounter_t, which doesn't seem to be needed.
> >
> > Fixes: 4dcea27ada77 ("tests/inet_socket: cover the MPTCP protocol")
> > Inspired-by: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
> > Signed-off-by: Ondrej Mosnacek <omosnace@xxxxxxxxxx>
>
> All tests pass with this applied, thanks.
>
> Tested-by: Stephen Smalley <stephen.smalley.work@xxxxxxxxx>
Thanks, applied:
https://github.com/SELinuxProject/selinux-testsuite/commit/ab02919a0f9db4b6f3d162073b93380d80478014
--
Ondrej Mosnacek
Senior Software Engineer, Linux Security - SELinux kernel
Red Hat, Inc.
