diff --git a/selinux-policy/swap-file-and-systemd-access/Makefile b/selinux-policy/swap-file-and-systemd-access/Makefile index 492b8e8..8ec066f 100644 --- a/selinux-policy/swap-file-and-systemd-access/Makefile +++ b/selinux-policy/swap-file-and-systemd-access/Makefile @@ -70,6 +70,7 @@ $(METADATA): Makefile @echo "Bug: 1912385" >> $(METADATA) # Fedora 32 @echo "Bug: 1926536" >> $(METADATA) # RHEL 9 @echo "Bug: 1928539" >> $(METADATA) # Fedora 32 + @echo "Bug: 1968610" >> $(METADATA) # RHEL 8 rhts-lint $(METADATA) diff --git a/selinux-policy/swap-file-and-systemd-access/runtest.sh b/selinux-policy/swap-file-and-systemd-access/runtest.sh index 4a60b43..1bcb508 100755 --- a/selinux-policy/swap-file-and-systemd-access/runtest.sh +++ b/selinux-policy/swap-file-and-systemd-access/runtest.sh @@ -83,6 +83,12 @@ rlJournalStart rlSESearchRule "allow systemd_sleep_t fixed_disk_device_t : blk_file { getattr } [ ]" rlPhaseEnd + rlPhaseStartTest "bz#1968610" + rlSEMatchPathCon "/sys/power" "sysfs_t" + rlSEMatchPathCon "/sys/power/state" "sysfs_t" + rlSESearchRule "allow systemd_sleep_t sysfs_t : dir { add_name create } [ ]" + rlPhaseEnd + if ${REAL_SCENARIOS} ; then rlPhaseStartTest "real scenario" rlRun "rm -f /swapfile"