Update ltp selinux test script and policy: Note: This does not obsolete or replace the other two patches I have posted (Fix LTPBIN definition in selinux_file.sh, Fix MLS handling in selinux tests), but rather should be applied on top of them. Attached is a patch and a tar file to update the ltp selinux test script and policy so that we no longer conditionally patch the test policy when we run the test script. The patch does the following:
- Disable patching of the policy in the test script.
- Change the refpolicy Makefile to redirect to a rhel/N/ subdirectory if running on a redhat release and move the rhel-specific definitions there.
- Change the refpolicy Makefile to only include test_bounds.te if the checkpolicy supports policy.24 (and thus typebounds statements).
- Merge the sbin_deprecated.patch into the test policy.
- Further update the test policy to build cleanly on f11, while preserving backward compatibility on f10.
- Added open permissions as necessary to the test policy (enabled in f11).
- Update the ioctl test policy to reflect the updated selinux_file_ioctl() logic in the kernel.
- Added a missing permission to the wait test policy that was causing it to wrongly report PASS.
The tar file contains a new testcases/kernel/security/selinux-testsuite/refpolicy/redhat/5 subdirectory to preserve a legacy copy of the test policy that works on redhat 5. The top-level refpolicy Makefile will redirect to this subdirectory when it detects redhat 5. Similar subdirectories can be added for other stable releases going forward as needed.
Subrata, please cvs add the new subdirectory and its files. Also, please cvs remove the following: ltp/testcases/kernel/security/selinux-testsuite/refpolicy/test_policy.te
(generated file, should not be in the repository), ltp/testcases/kernel/security/selinux-testsuite/misc/*. Signed-Off-by: Stephen Smalley <sds@tycho.nsa.gov>.
81 files changed