On 5/5/09, Stephen Smalley <[email protected]> wrote:
>
> Note: This does not obsolete or replace the other two patches I have
> posted (Fix LTPBIN definition in selinux_file.sh, Fix MLS handling in
> selinux tests), but rather should be applied on top of them.
>
> Attached is a patch and a tar file to update the ltp selinux test script
> and policy so that we no longer conditionally patch the test policy when
> we run the test script. The patch does the following:
> - Disable patching of the policy in the test script.
> - Change the refpolicy Makefile to redirect to a rhel/N/ subdirectory if
> running on a redhat release and move the rhel-specific definitions
> there.
> - Change the refpolicy Makefile to only include test_bounds.te if the
> checkpolicy supports policy.24 (and thus typebounds statements).
> - Merge the sbin_deprecated.patch into the test policy.
> - Further update the test policy to build cleanly on f11, while
> preserving backward compatibility on f10.
> - Added open permissions as necessary to the test policy (enabled in
> f11).
> - Update the ioctl test policy to reflect the updated
> selinux_file_ioctl() logic in the kernel.
> - Added a missing permission to the wait test policy that was causing it
> to wrongly report PASS.
>
> The tar file contains a new
> testcases/kernel/security/selinux-testsuite/refpolicy/redhat/5
> subdirectory to preserve a legacy copy of the test policy that works on
> redhat 5. The top-level refpolicy Makefile will redirect to this
> subdirectory when it detects redhat 5. Similar subdirectories can be
> added for other stable releases going forward as needed.
>
> Subrata, please cvs add the new subdirectory and its files. Also,
> please cvs remove the following:
Thanks Stephen. This and the other patches will take a little time to get
applied till i return from vacation next week ;-)
Regards--
Subrata
ltp/testcases/kernel/security/selinux-testsuite/refpolicy/test_policy.te
> (generated file, should not be in the repository)
> ltp/testcases/kernel/security/selinux-testsuite/misc/*
>
> Thanks.
>
> --
> Stephen Smalley
> National Security Agency
>
>
> ------------------------------------------------------------------------------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
> production scanning environment may not be a perfect world - but thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW KODAK
> i700
> Series Scanner you'll get full speed at 300 dpi even with all image
> processing features enabled. http://p.sf.net/sfu/kodak-com
> _______________________________________________
> Ltp-list mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/ltp-list
>
>
>
--
Regards & Thanks--
Subrata
------------------------------------------------------------------------------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK i700
Series Scanner you'll get full speed at 300 dpi even with all image
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Ltp-list mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/ltp-list
