This has been Applied too. Thanks. Regards-- Subrata
On Wed, 2008-04-02 at 13:45 -0400, Stephen Smalley wrote: > This patch, which is independent of Jeff's patch, updates the selinux > testsuite to run under Fedora 9, and does no harm on Fedora 8. > > While creating this, I noticed two other things that ultimately need > fixing: > 1) The sbin_deprecated.patch adds domain_dyntrans_type() to all the test > domains. If that was truly desired, we should just put it into > unconfined_runs_test(). But it shouldn't be necessary - only the > test_dyntrans.te and test_dyntrace.te domains should require permissions > for dynamic transitions. I'll let Serge confirm that. > 2) The test scripts are presently relabeling /tmp to test_file_t for the > duration of the test. That's insane - it could break any other running > process that tries to access /tmp during the test. That was not part of > our original selinux testsuite and seems to have been introduced when > IBM ported it to LTP. If you are worried about lacking search > permission to /tmp in the test domains, then create your own > private /test directory or something. Or just give all test domains > permission to search tmp either via unconfined_runs_test() or in > test_global.te using the testdomain attribute. > > Those don't need to be fixed though for this patch to be merged. > > Also, I noticed some new failures in the tests due to latest Fedora > policies giving all domains search permission to all directories. Not > sure if that was intentional - sent a separate note to Dan about that. > ------------------------------------------------------------------------- This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Register now and save $200. Hurry, offer ends at 11:59 p.m., Monday, April 7! Use priority code J8TLD2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone _______________________________________________ Ltp-list mailing list Ltp-list@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/ltp-list
