{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":30303774,"defaultBranch":"main","name":"selinux-testsuite","ownerLogin":"SELinuxProject","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2015-02-04T14:52:31.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/7838867?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1684957336.733896","currentOid":""},"activityList":{"items":[{"before":"72ed9de4f15b204188f63722d4adb2db0cc2d223","after":"0815abcd70b382e13592264ce39bf48742421cc8","ref":"refs/heads/main","pushedAt":"2024-06-03T08:42:13.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/nfs_filesystem: comment out failing mount\n\nFor reasons unclear, we attempt to mount twice, the 2nd time yields EBUSY,\nand then the following test fails. Comment out the 2nd mount, which also\nresolves the failure.\n\nThis bug is tracked in\nhttps://github.com/SELinuxProject/selinux-testsuite/issues/92\n\nBefore:\nRun NFS context specific tests\nnfs_filesystem/test .. 2/56 creat(2) Failed: Permission denied\n\n# Failed test at nfs_filesystem/test line 118.\nnfs_filesystem/test .. 30/56 creat(2) Failed: Permission denied\n\n# Failed test at nfs_filesystem/test line 118.\nnfs_filesystem/test .. 53/56 # Looks like you failed 2 tests of 56.\nnfs_filesystem/test .. Dubious, test returned 2 (wstat 512, 0x200)\nFailed 2/56 subtests\n\nTest Summary Report\n-------------------\nnfs_filesystem/test (Wstat: 512 (exited 2) Tests: 56 Failed: 2)\n Failed tests: 7, 35\n Non-zero exit status: 2\nFiles=1, Tests=56, 12 wallclock secs ( 0.02 usr 0.00 sys + 0.15 cusr 0.25 csys = 0.42 CPU)\nResult: FAIL\nFailed 1/1 test programs. 2/56 subtests failed.\nError on line: 104 - Closing down NFS\numount: /mnt/selinux-testsuite: not mounted.\nNFS Closed down\n\nAfter:\nNo errors from this test script.\n\nSigned-off-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/nfs_filesystem: comment out failing mount"}},{"before":"6212c8f9d46d5a85f4adc777b5a37a781559a014","after":"72ed9de4f15b204188f63722d4adb2db0cc2d223","ref":"refs/heads/main","pushedAt":"2024-03-19T09:43:40.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"policy: avoid usage of fedora specific install_t\n\nThe type install_t is fedora specific and not declared in the Reference\nPolicy.\nAvoid linker failures by using anaconda_fd_use() if available.\n\nFixes: f9f4a604b50e (\"policy: fix testsuite_domain_type_minimal() to work with rpm-ostree\")\nSigned-off-by: Christian Göttsche ","shortMessageHtmlLink":"policy: avoid usage of fedora specific install_t"}},{"before":"f9f4a604b50eecdc9ff674f1762208f23c15013f","after":"6212c8f9d46d5a85f4adc777b5a37a781559a014","ref":"refs/heads/main","pushedAt":"2024-02-19T20:48:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/inet_socket: test CALIPSO also with datagram protocols\n\nWe can't compare the labels because of the lack of SCM_SECURITY support\nin IPv6, but otherwise this case can be at least basically tested.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/inet_socket: test CALIPSO also with datagram protocols"}},{"before":"78e144cf3ccebbef09ce41bf283b6387b9e3fd50","after":"f9f4a604b50eecdc9ff674f1762208f23c15013f","ref":"refs/heads/main","pushedAt":"2024-02-12T09:57:24.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"policy: fix testsuite_domain_type_minimal() to work with rpm-ostree\n\nAfter a live package installation on an OSTree system using `rpm-ostree\ninstall --apply-live ...`, domains need to be able to use file\ndescriptors from install_t, otherwise they fail to load dynamic\nlibraries. Thus, this rule needs to be added to\ntestsuite_domain_type_minimal() so that the testuite ca run successfully\non OSTree systems.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"policy: fix testsuite_domain_type_minimal() to work with rpm-ostree"}},{"before":"9982a010e15d79c47cf925b9c12d31b482506d1e","after":"78e144cf3ccebbef09ce41bf283b6387b9e3fd50","ref":"refs/heads/main","pushedAt":"2024-01-25T08:54:06.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"README: minor Markdown style/formatting fixes\n\nSigned-off-by: Paul Moore ","shortMessageHtmlLink":"README: minor Markdown style/formatting fixes"}},{"before":"6b283641fa4c8c554bd5476c9660667acf6e3c74","after":"9982a010e15d79c47cf925b9c12d31b482506d1e","ref":"refs/heads/main","pushedAt":"2024-01-22T10:18:44.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/inet_socket: simplify one if/else block\n\nThere are some duplicate commands that can be put outside the if/else\nblock.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/inet_socket: simplify one if/else block"}},{"before":"fa65d2f59c4d974ef736bc1cd3bfab75b78ac5f0","after":"6b283641fa4c8c554bd5476c9660667acf6e3c74","ref":"refs/heads/main","pushedAt":"2023-11-28T12:35:55.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"ci: bump actions/checkout to v4\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"ci: bump actions/checkout to v4"}},{"before":"ab02919a0f9db4b6f3d162073b93380d80478014","after":"fa65d2f59c4d974ef736bc1cd3bfab75b78ac5f0","ref":"refs/heads/main","pushedAt":"2023-11-28T09:21:00.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"defconfig: add NF_TABLES dependency for netlink_socket tests to pass\n\nIn order to support the NETFILTER_NETLINK protocol, either NF_TABLES or IP_SET must be enabled.\nNeither are strict dependencies in Kconfig. Fix this by enabling NF_TABLES in the defconfig.\n\nBefore:\n ./netlinkcreate: socket(AF_NETLINK, SOCK_DGRAM, netfilter/12): Protocol not supported\n not ok 3\n # Test 3 got: \"256\" (./test at line 25)\n # Expected: \"0\"\n # ./test line 25 is: ok( $result, 0 );\n\nAfter:\n ok 3\n\nSigned-off-by: Alan Wandke \nReviewed-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"defconfig: add NF_TABLES dependency for netlink_socket tests to pass"}},{"before":"514e324abc099057782ec569b720eaf9b6d9d99f","after":"ab02919a0f9db4b6f3d162073b93380d80478014","ref":"refs/heads/main","pushedAt":"2023-07-18T08:29:05.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"policy: allow all test domains to search user/admin home directories\n\nThe permissions are sometimes needed to resolve paths when running the\ntestsuite from a user/admin home directory. To avoid cluttering\nindividual policy files with macros that allow it, apply the macros to\nthe whole testsuite_domain attribute. Thankfully this doesn't break the\nother tests.\n\nThis also fixes the inet_socket test, which started to require these\npermissions after a recent change.\n\nWhile there, also remove userdom_read_user_tmp_files() from\ntest_overlay_mounter_t, which doesn't seem to be needed.\n\nFixes: 4dcea27ada77 (\"tests/inet_socket: cover the MPTCP protocol\")\nInspired-by: Stephen Smalley \nTested-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"policy: allow all test domains to search user/admin home directories"}},{"before":"4dcea27ada77f51c2868095e951aab790374fba9","after":"514e324abc099057782ec569b720eaf9b6d9d99f","ref":"refs/heads/main","pushedAt":"2023-06-29T09:49:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"ci: bump Fedora versions\n\nFedora 38 is the latest stable release, so update the Fedora versions we\nuse for CI.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"ci: bump Fedora versions"}},{"before":"17fecc443e267407f2f48e2cb17fbe83699f235d","after":"4dcea27ada77f51c2868095e951aab790374fba9","ref":"refs/heads/main","pushedAt":"2023-06-29T08:44:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/inet_socket: cover the MPTCP protocol\n\nAs of kernel 6.5 MPTCP should work as a drop-in replacement for TCP\nw.r.t. SELinux, so test it in addition to TCP using the same tests.\n\nThis requires modifying the inet_socket test to test each protocol\nseparately, using the same subdirectory symlink trick as in the\n[fs_]filesystem tests. After that, an mptcp subtest can be added easily\nby extending the programs to support it and adding a new subdirectory\nsymlink for it.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/inet_socket: cover the MPTCP protocol"}},{"before":null,"after":"17fecc443e267407f2f48e2cb17fbe83699f235d","ref":"refs/heads/main","pushedAt":"2023-05-24T19:42:16.733Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"pcmoore","name":"Paul Moore","path":"/pcmoore","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8494929?s=80&v=4"},"commit":{"message":"tests/atsecure: avoid running bash under test domains\n\nThe 'env' utility can be used just as well. This avoids the \"bash:\n/root/.bashrc: Permission denied\" error message that appears when the\ntestsuite is ran with a terminal attached to the stdout/stdin and the\ncorresponding AVC denials.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/atsecure: avoid running bash under test domains"}},{"before":"1c0b28e34eb7763190e3a87966cab82d9fcb50fa","after":"17fecc443e267407f2f48e2cb17fbe83699f235d","ref":"refs/heads/master","pushedAt":"2023-03-16T09:24:25.600Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/atsecure: avoid running bash under test domains\n\nThe 'env' utility can be used just as well. This avoids the \"bash:\n/root/.bashrc: Permission denied\" error message that appears when the\ntestsuite is ran with a terminal attached to the stdout/stdin and the\ncorresponding AVC denials.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/atsecure: avoid running bash under test domains"}},{"before":"65cbbb8c4a4cafd1b307bfbd954acd7c5a653bb8","after":"1c0b28e34eb7763190e3a87966cab82d9fcb50fa","ref":"refs/heads/master","pushedAt":"2023-03-13T13:42:19.331Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"defconfig: add FAT and GRE config options\n\nThese are required for some of the fat filesystem and sctp tests to run.\n\nSigned-off-by: Stephen Smalley ","shortMessageHtmlLink":"defconfig: add FAT and GRE config options"}},{"before":"4b4922e115e2058a3c49394b191248f560797eb2","after":"65cbbb8c4a4cafd1b307bfbd954acd7c5a653bb8","ref":"refs/heads/master","pushedAt":"2023-03-09T10:06:32.686Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"README.md: reflect new dependency on rdma-core-devel\n\nAfter the switch to enabling the InfiniBand tests dynamically,\nrdma-core-devel (formerly libibverbs-devel) is needed to build the\ntestsuite. Update README.md to reflect this.\n\nFixes: 4b4922e115e2 (\"tests/infiniband*: simplify test activation\")\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"README.md: reflect new dependency on rdma-core-devel"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEWrPM_QA","startCursor":null,"endCursor":null}},"title":"Activity · SELinuxProject/selinux-testsuite"}