PR#465: test if exim can send into /var/spool/exim/exim_daemon_notify - tests/selinux

Milos Malik • 3 months ago

3ea1adb

selinux-policy/exim-and-similar/Makefile

file modified

+3 -1

		`@@ -54,7 +54,7 @@`
		`@echo "Type: Regression" >> $(METADATA)`
		`@echo "TestTime: 5m" >> $(METADATA)`
		`@echo "RunFor: selinux-policy" >> $(METADATA)`
		`- @echo "Requires: audit libselinux libselinux-utils policycoreutils selinux-policy selinux-policy-targeted /usr/sbin/service setools-console at exim" >> $(METADATA)`
		`+ @echo "Requires: audit libselinux libselinux-utils policycoreutils selinux-policy selinux-policy-targeted /usr/sbin/service setools-console at exim lsof" >> $(METADATA)`
		`@echo "RhtsRequires: library(selinux-policy/common)" >> $(METADATA)`
		`@echo "Priority: Normal" >> $(METADATA)`
		`@echo "License: GPLv2" >> $(METADATA)`
		`@@ -66,6 +66,8 @@`
		`@echo "Bug: 1444441" >> $(METADATA) # RHEL-7`
		`@echo "Bug: RHEL-14110" >> $(METADATA) # RHEL-9`
		`@echo "Bug: RHEL-14186" >> $(METADATA) # RHEL-8`
		`+ @echo "Bug: RHEL-21902" >> $(METADATA) # RHEL-9`
		`+ @echo "Bug: RHEL-21903" >> $(METADATA) # RHEL-8`

		`rhts-lint $(METADATA)`

selinux-policy/exim-and-similar/main.fmf

file modified

		`@@ -20,6 +20,7 @@`
		`- setools-console`
		`- at`
		`- exim`
		`+ - lsof`
		`environment:`
		`AVC_ERROR: +no_avc_check`
		`duration: 5m`
		`@@ -39,6 +40,8 @@`
		`- relates: https://bugzilla.redhat.com/show_bug.cgi?id=1444441`
		`- verifies: https://issues.redhat.com/browse/RHEL-14110`
		`- verifies: https://issues.redhat.com/browse/RHEL-14186`
		`+ - verifies: https://issues.redhat.com/browse/RHEL-21902`
		`+ - verifies: https://issues.redhat.com/browse/RHEL-21903`
		`adjust:`
		`- enabled: false`
		`when: distro == rhel-4, rhel-alt-7`

file modified

		`@@ -85,6 +85,13 @@`
		`rlPhaseEnd`
		`fi`

		`+ if rlIsRHEL 8 9 \|\| rlIsCentOS 8 9 ; then`
		`+ rlPhaseStartTest "RHEL-21902 + RHEL-21903"`
		`+ rlSEMatchPathCon "/var/spool/exim/exim_daemon_notify" "exim_spool_t"`
		`+ rlSESearchRule "allow exim_t exim_t : unix_dgram_socket { sendto } [ ]"`
		`+ rlPhaseEnd`
		`+ fi`
		`+`
		`rlPhaseStartTest "real scenario -- standalone service"`
		`rlRun "echo ${ROOT_PASSWORD} \| passwd --stdin root"`
		`if ! rlSEDefined ${PROCESS_CONTEXT} ; then`
		`@@ -92,6 +99,7 @@`
		`PROCESS_CONTEXT="sendmail_t"`
		`fi`
		`rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "start status" 1`
		`+ rlRun "lsof \| grep exim_daemon_notify"`
		`rlRun "restorecon -Rv /run /var -e /var/ARTIFACTS" 0-255`
		`rlSEService ${ROOT_PASSWORD} ${SERVICE_NAME} ${PROCESS_NAME} ${PROCESS_CONTEXT} "restart status stop status" 1`
		`rlPhaseEnd`