From a150513222610c4943f2f5f10c845eade624c4fe Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 2 Nov 2022 13:02:55 -0400
Subject: [PATCH] tests/kola/selinux: add test that policy isn't recompiled

This is a test for https://github.com/openshift/os/issues/1036. It also
exists in the rpm-ostree CI, but let's have it here too since other
packages can break this.
---
 tests/kola/selinux/default | 15 +++++++++++++++
 1 file changed, 15 insertions(+)
 create mode 100755 tests/kola/selinux/default

diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
new file mode 100755
index 0000000000..46102952a8
--- /dev/null
+++ b/tests/kola/selinux/default
@@ -0,0 +1,15 @@
+#!/bin/bash
+# Verify that the SELinux policy isn't marked as modified.
+# See: https://github.com/openshift/os/issues/1036.
+## kola:
+##   exclusive: false
+##   tags: "platform-independent"
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ostree admin config-diff | grep 'selinux/targeted/policy'; then
+    fatal "SELinux policy is marked as modified"
+fi
+ok "SELinux policy not marked as modified"