diff --git a/selinux-policy/perf_event-and-related/Makefile b/selinux-policy/perf_event-and-related/Makefile index 33b31e1..8dd8ac1 100644 --- a/selinux-policy/perf_event-and-related/Makefile +++ b/selinux-policy/perf_event-and-related/Makefile @@ -54,7 +54,7 @@ $(METADATA): Makefile @echo "Type: Regression" >> $(METADATA) @echo "TestTime: 10m" >> $(METADATA) @echo "RunFor: selinux-policy" >> $(METADATA) - @echo "Requires: audit libselinux libselinux-utils policycoreutils selinux-policy selinux-policy-targeted setools-console perf expect openssh-clients" >> $(METADATA) + @echo "Requires: audit libselinux libselinux-utils policycoreutils selinux-policy selinux-policy-targeted setools-console perf expect openssh-clients initscripts" >> $(METADATA) @echo "RhtsRequires: library(selinux-policy/common)" >> $(METADATA) @echo "Environment: AVC_ERROR=+no_avc_check" >> $(METADATA) @echo "Priority: Normal" >> $(METADATA) diff --git a/selinux-policy/perf_event-and-related/runtest.sh b/selinux-policy/perf_event-and-related/runtest.sh index 7a9577a..3578e39 100755 --- a/selinux-policy/perf_event-and-related/runtest.sh +++ b/selinux-policy/perf_event-and-related/runtest.sh @@ -70,6 +70,10 @@ rlJournalStart rlPhaseEnd rlPhaseStartTest "real scenario -- confined root sysadm_u" + rlRun "grep -i permit /etc/ssh/sshd_config" + rlFileBackup /etc/ssh/sshd_config + rlRun "sed -i 's/^.*PermitRootLogin.*$/PermitRootLogin yes/' /etc/ssh/sshd_config" + rlRun "service sshd restart" rlRun "setsebool ssh_sysadm_login on" USER_NAME="toor" USER_SECRET="S3kr3t${RANDOM}" @@ -78,6 +82,8 @@ rlJournalStart rlRun "./ssh.exp ${USER_NAME}/sysadm_r ${USER_SECRET} localhost perf record -o /dev/null echo test" rlRun "userdel -Z ${USER_NAME}" rlRun "setsebool ssh_sysadm_login off" + rlFileRestore + rlRun "service sshd restart" rlPhaseEnd rlPhaseStartCleanup