mmalik / tests / selinux

Forked from tests/selinux 6 years ago
Clone

9eccecc add new test which uses pam_limits and nonewprivs

5 files Authored by mmalik 2 years ago, Committed by mmalik 2 years ago,
    add new test which uses pam_limits and nonewprivs
    
    The pam_limits.so module can apply various limits on users, groups
    and other domains. Purpose of this TC is to find out if these limits
    do not interfere with current SELinux policy.
    
    If nonewprivs limit is used on confined or unconfined users, SELinux
    denials with { nnp_transition } appear when users log in. The TC
    reproduces the situation.
    I believe this operation should be allowed to make the security feature
    work. The TC looks for appropriate SELinux policy rules.
    
    The TC covers BZ#1958819.