test if sysadm_u can run dmidecode via sudo
A recently filed customer case revealed that SELinux prevents the
sysadm_u users from running the dmidecode command via sudo which
has the input/output logging enabled. The following error message
appears during the action:
sudo: unable to open /var: Permission denied
The TC reproduces the situation.
In order to support the above-mentioned configuration, I believe that
SELinux policy should allow the necessary actions. The TC looks for
appropriate policy rules and file context patterns.
The TC covers RHEL-16104.