On Tue, 2010-01-12 at 00:29 -0800, Garrett Cooper wrote: > On Mon, Jan 11, 2010 at 1:00 PM, Serge E. Hallyn <[email protected]> wrote: > > Quoting Serge E. Hallyn ([email protected]): > >> Quoting Serge E. Hallyn ([email protected]): > >> > Quoting Stephen Smalley ([email protected]): > >> > > On Mon, 2010-01-11 at 13:50 -0600, Serge E. Hallyn wrote: > >> > > > > Fails with: > >> > > > > cp: cannot stat > >> > > > > `/home/sds/ltp/testcases/kernel/security/selinux-testsuite/refpolicy/policy_files/generic/test_policy.*': > >> > > > > No such file or directory > >> > > > > >> > > > You ran /home/sds/ltp/testscripts/test_selinux.sh, right? > >> > > > > >> > > > I think we are supposed to actually be running > >> > > > /opt/ltp/testscripts/test_selinux.sh. So then the first question for > >> > > > Garrett is how should we deduce /home/sds/ltp as $LTP_SRCDIR from a > >> > > > testscript? Or should the policy sources be copied into /opt? > >> > > > >> > > Ok, but regardless: the refpolicy Makefile is still broken. > >> > > >> > Yup. > >> > >> All right, baby-steps. > >> > >> The attached test_selinux.diff is not to be applied, but something > >> like it is needed. Should we have the ltp 'make install' fill in > >> TOP_SRCDIR in /opt/ltp/testscripts/test_selinux.sh? BTW, Garrett, > >> that is the issue I was saying is shared between test_selinux.sh > >> and some others including test_robind.sh. That's why I'm not just > >> sending a patch to make it work, bc i think we need more general > >> guidance. > >> > >> The second match makes the 'make load' part of test_selinux.sh > >> succeed on rhel5.4. Stephen, how does it do on fedora? > >> > >> After loading policy it fails to execute ltp-pan, but I figure let's > >> get policy loading working first. > >> > >> -serge > > > > gah, attaching the actual patches this time. > > > > -serge > > 1. I'm rejecting the test_selinux.diff solely because it has /root/ltp > hardcoded as LTPROOT. 2. Why is the redhat stuff support to work > agnostic to the major and minor version?
We haven't yet had to fork the test policy based on minor version, only based on major version. So we presently have a fork of the test policy for rhel5, and will likely create one for rhel6 when it is released, while "generic" will continue to track latest fedora. -- Stephen Smalley National Security Agency ------------------------------------------------------------------------------ This SF.Net email is sponsored by the Verizon Developer Community Take advantage of Verizon's best-in-class app development support A streamlined, 14 day to market process makes app distribution fast and easy Join now and get one step closer to millions of Verizon customers http://p.sf.net/sfu/verizon-dev2dev _______________________________________________ Ltp-list mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/ltp-list
