tests: check for avc denials around daemon-reload

xref https://bugzilla.redhat.com/show_bug.cgi?id=1924869

tests/kola/systemd/systemd-daemon-reload-avc

@@ -0,0 +1,18 @@
+#!/bin/bash
+# kola: { "exclusive": true }
+# Verify there are no AVC denial before and after reloading the systemd manager configuration
+#
+# https://bugzilla.redhat.com/show_bug.cgi?id=1924869
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ausearch -m avc | grep 'avc:  denied'; then
+    fatal "Found AVC denials"
+fi
+
+systemctl daemon-reload
+
+if ausearch -m avc | grep 'avc:  denied'; then
+    fatal "Found AVC denials after systemctl daemon-reload"
+fi