diff --git a/selinux-policy/cups-pdf-and-similar/Makefile b/selinux-policy/cups-pdf-and-similar/Makefile index b3668ab..c5b6428 100644 --- a/selinux-policy/cups-pdf-and-similar/Makefile +++ b/selinux-policy/cups-pdf-and-similar/Makefile @@ -72,6 +72,7 @@ $(METADATA): Makefile @echo "Bug: 1594271" >> $(METADATA) # Fedora 28 @echo "Bug: 1700442" >> $(METADATA) # Fedora 28 @echo "Bug: 1832521" >> $(METADATA) # Fedora 32 + @echo "Bug: 2234765" >> $(METADATA) # RHEL-9 rhts-lint $(METADATA) diff --git a/selinux-policy/cups-pdf-and-similar/main.fmf b/selinux-policy/cups-pdf-and-similar/main.fmf index 45a71bd..b037121 100644 --- a/selinux-policy/cups-pdf-and-similar/main.fmf +++ b/selinux-policy/cups-pdf-and-similar/main.fmf @@ -43,6 +43,7 @@ link: - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1594271 - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1700442 - relates: https://bugzilla.redhat.com/show_bug.cgi?id=1832521 + - verifies: https://bugzilla.redhat.com/show_bug.cgi?id=2234765 adjust: - enabled: false when: distro == rhel-4, rhel-5, rhel-6, rhel-alt-7 diff --git a/selinux-policy/cups-pdf-and-similar/runtest.sh b/selinux-policy/cups-pdf-and-similar/runtest.sh index 9820e7d..86c5aab 100755 --- a/selinux-policy/cups-pdf-and-similar/runtest.sh +++ b/selinux-policy/cups-pdf-and-similar/runtest.sh @@ -109,6 +109,10 @@ rlJournalStart rlPhaseStartTest "bz#1832521" rlSESearchRule "allow cups_pdf_t cups_pdf_t : unix_dgram_socket { create connect } [ ]" rlPhaseEnd + + rlPhaseStartTest "bz#2234765" + rlSESearchRule "allow cups_pdf_t kernel_t : unix_stream_socket { connectto } [ ]" + rlPhaseEnd fi rlPhaseStartTest "real scenario -- confined users"