apeetham / tests / selinux

Forked from tests/selinux 3 years ago
Clone
Blob Blame History Raw
summary: Basic test for SELinux AVC tracepoint support
description: |
  Tests basic functionality of the built-in kernel tracepoint for audited
  SELinux denials that has been introduced in kernel v5.10.

  See also:
  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=dd8166212d9a2eca3181567c953d5687aea4d7dc
contact: Ondrej Mosnacek <omosnace@redhat.com>
component:
- kernel
framework: beakerlib
require:
- perf
duration: 5m
tier: 2
enabled: true
adjust:
- enabled: false
  when: distro < rhel-8.5
  because: RHEL-8.5 and below are not expected to support this
- enabled: false
  when: distro < fedora-35
  because: This feature may not be available in kernels in F34 and below
link:
- verifies: https://bugzilla.redhat.com/show_bug.cgi?id=1954024
environment:
  AVC_ERROR: +no_avc_check