{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":30303774,"defaultBranch":"main","name":"selinux-testsuite","ownerLogin":"SELinuxProject","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2015-02-04T14:52:31.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/7838867?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1684957336.733896","currentOid":""},"activityList":{"items":[{"before":"82cdcae9e3e8c506c37d900d497e94da70728799","after":"f71a462ee3816393098e0cc22728f387e2b1f846","ref":"refs/heads/main","pushedAt":"2024-09-10T12:56:18.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/extended_socket_class: test SMC sockets\n\nEnable SMC sockets and their dependencies in the defconfig and\nexercise them as part of the extended socket class tests.\nThis only verifies that socket create permission is checked\nagainst the correct class. The tests only cover AF_SMC,\nnot IPPROTO_SMC.\n\nSigned-off-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/extended_socket_class: test SMC sockets"}},{"before":"a9e631f0f1d5b11756a62679e8da073b3cc85b13","after":"82cdcae9e3e8c506c37d900d497e94da70728799","ref":"refs/heads/main","pushedAt":"2024-09-09T16:15:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"policy/test_filesystem.te: fix policy for NFS over a symlinked directory\n\nWhen the current directory is a symlink to the actual selinux-testsuite\ndirectory, running ./tools/nfs.sh would fail at nfs_filesystem/test due\nto missing policy rules. Add the necessary rules so that it can pass\nalso in this scenario.\n\nAcked-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"policy/test_filesystem.te: fix policy for NFS over a symlinked directory"}},{"before":"0815abcd70b382e13592264ce39bf48742421cc8","after":"a9e631f0f1d5b11756a62679e8da073b3cc85b13","ref":"refs/heads/main","pushedAt":"2024-08-30T06:28:26.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/key_socket: skip the test if CONFIG_NET_KEY is not enabled\n\nRHEL/CentOS Stream 10+ and Fedora ELN will have CONFIG_NET_KEY disabled\n[1]. Make the test skip itself when it detects that PF_KEY is not\nsupported so that the testsuite can still pass out-of-the-box on these\nplatforms.\n\n[1] https://gitlab.com/cki-project/kernel-ark/-/commit/99d6d1c86fe1bb1df5c0b80f4717826c2330e291\n\nAcked-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/key_socket: skip the test if CONFIG_NET_KEY is not enabled"}},{"before":"72ed9de4f15b204188f63722d4adb2db0cc2d223","after":"0815abcd70b382e13592264ce39bf48742421cc8","ref":"refs/heads/main","pushedAt":"2024-06-03T08:42:13.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/nfs_filesystem: comment out failing mount\n\nFor reasons unclear, we attempt to mount twice, the 2nd time yields EBUSY,\nand then the following test fails. Comment out the 2nd mount, which also\nresolves the failure.\n\nThis bug is tracked in\nhttps://github.com/SELinuxProject/selinux-testsuite/issues/92\n\nBefore:\nRun NFS context specific tests\nnfs_filesystem/test .. 2/56 creat(2) Failed: Permission denied\n\n# Failed test at nfs_filesystem/test line 118.\nnfs_filesystem/test .. 30/56 creat(2) Failed: Permission denied\n\n# Failed test at nfs_filesystem/test line 118.\nnfs_filesystem/test .. 53/56 # Looks like you failed 2 tests of 56.\nnfs_filesystem/test .. Dubious, test returned 2 (wstat 512, 0x200)\nFailed 2/56 subtests\n\nTest Summary Report\n-------------------\nnfs_filesystem/test (Wstat: 512 (exited 2) Tests: 56 Failed: 2)\n Failed tests: 7, 35\n Non-zero exit status: 2\nFiles=1, Tests=56, 12 wallclock secs ( 0.02 usr 0.00 sys + 0.15 cusr 0.25 csys = 0.42 CPU)\nResult: FAIL\nFailed 1/1 test programs. 2/56 subtests failed.\nError on line: 104 - Closing down NFS\numount: /mnt/selinux-testsuite: not mounted.\nNFS Closed down\n\nAfter:\nNo errors from this test script.\n\nSigned-off-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/nfs_filesystem: comment out failing mount"}},{"before":"6212c8f9d46d5a85f4adc777b5a37a781559a014","after":"72ed9de4f15b204188f63722d4adb2db0cc2d223","ref":"refs/heads/main","pushedAt":"2024-03-19T09:43:40.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"policy: avoid usage of fedora specific install_t\n\nThe type install_t is fedora specific and not declared in the Reference\nPolicy.\nAvoid linker failures by using anaconda_fd_use() if available.\n\nFixes: f9f4a604b50e (\"policy: fix testsuite_domain_type_minimal() to work with rpm-ostree\")\nSigned-off-by: Christian Göttsche ","shortMessageHtmlLink":"policy: avoid usage of fedora specific install_t"}},{"before":"f9f4a604b50eecdc9ff674f1762208f23c15013f","after":"6212c8f9d46d5a85f4adc777b5a37a781559a014","ref":"refs/heads/main","pushedAt":"2024-02-19T20:48:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/inet_socket: test CALIPSO also with datagram protocols\n\nWe can't compare the labels because of the lack of SCM_SECURITY support\nin IPv6, but otherwise this case can be at least basically tested.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/inet_socket: test CALIPSO also with datagram protocols"}},{"before":"78e144cf3ccebbef09ce41bf283b6387b9e3fd50","after":"f9f4a604b50eecdc9ff674f1762208f23c15013f","ref":"refs/heads/main","pushedAt":"2024-02-12T09:57:24.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"policy: fix testsuite_domain_type_minimal() to work with rpm-ostree\n\nAfter a live package installation on an OSTree system using `rpm-ostree\ninstall --apply-live ...`, domains need to be able to use file\ndescriptors from install_t, otherwise they fail to load dynamic\nlibraries. Thus, this rule needs to be added to\ntestsuite_domain_type_minimal() so that the testuite ca run successfully\non OSTree systems.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"policy: fix testsuite_domain_type_minimal() to work with rpm-ostree"}},{"before":"9982a010e15d79c47cf925b9c12d31b482506d1e","after":"78e144cf3ccebbef09ce41bf283b6387b9e3fd50","ref":"refs/heads/main","pushedAt":"2024-01-25T08:54:06.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"README: minor Markdown style/formatting fixes\n\nSigned-off-by: Paul Moore ","shortMessageHtmlLink":"README: minor Markdown style/formatting fixes"}},{"before":"6b283641fa4c8c554bd5476c9660667acf6e3c74","after":"9982a010e15d79c47cf925b9c12d31b482506d1e","ref":"refs/heads/main","pushedAt":"2024-01-22T10:18:44.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/inet_socket: simplify one if/else block\n\nThere are some duplicate commands that can be put outside the if/else\nblock.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/inet_socket: simplify one if/else block"}},{"before":"fa65d2f59c4d974ef736bc1cd3bfab75b78ac5f0","after":"6b283641fa4c8c554bd5476c9660667acf6e3c74","ref":"refs/heads/main","pushedAt":"2023-11-28T12:35:55.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"ci: bump actions/checkout to v4\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"ci: bump actions/checkout to v4"}},{"before":"ab02919a0f9db4b6f3d162073b93380d80478014","after":"fa65d2f59c4d974ef736bc1cd3bfab75b78ac5f0","ref":"refs/heads/main","pushedAt":"2023-11-28T09:21:00.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"defconfig: add NF_TABLES dependency for netlink_socket tests to pass\n\nIn order to support the NETFILTER_NETLINK protocol, either NF_TABLES or IP_SET must be enabled.\nNeither are strict dependencies in Kconfig. Fix this by enabling NF_TABLES in the defconfig.\n\nBefore:\n ./netlinkcreate: socket(AF_NETLINK, SOCK_DGRAM, netfilter/12): Protocol not supported\n not ok 3\n # Test 3 got: \"256\" (./test at line 25)\n # Expected: \"0\"\n # ./test line 25 is: ok( $result, 0 );\n\nAfter:\n ok 3\n\nSigned-off-by: Alan Wandke \nReviewed-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"defconfig: add NF_TABLES dependency for netlink_socket tests to pass"}},{"before":"514e324abc099057782ec569b720eaf9b6d9d99f","after":"ab02919a0f9db4b6f3d162073b93380d80478014","ref":"refs/heads/main","pushedAt":"2023-07-18T08:29:05.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"policy: allow all test domains to search user/admin home directories\n\nThe permissions are sometimes needed to resolve paths when running the\ntestsuite from a user/admin home directory. To avoid cluttering\nindividual policy files with macros that allow it, apply the macros to\nthe whole testsuite_domain attribute. Thankfully this doesn't break the\nother tests.\n\nThis also fixes the inet_socket test, which started to require these\npermissions after a recent change.\n\nWhile there, also remove userdom_read_user_tmp_files() from\ntest_overlay_mounter_t, which doesn't seem to be needed.\n\nFixes: 4dcea27ada77 (\"tests/inet_socket: cover the MPTCP protocol\")\nInspired-by: Stephen Smalley \nTested-by: Stephen Smalley \nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"policy: allow all test domains to search user/admin home directories"}},{"before":"4dcea27ada77f51c2868095e951aab790374fba9","after":"514e324abc099057782ec569b720eaf9b6d9d99f","ref":"refs/heads/main","pushedAt":"2023-06-29T09:49:12.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"ci: bump Fedora versions\n\nFedora 38 is the latest stable release, so update the Fedora versions we\nuse for CI.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"ci: bump Fedora versions"}},{"before":"17fecc443e267407f2f48e2cb17fbe83699f235d","after":"4dcea27ada77f51c2868095e951aab790374fba9","ref":"refs/heads/main","pushedAt":"2023-06-29T08:44:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/inet_socket: cover the MPTCP protocol\n\nAs of kernel 6.5 MPTCP should work as a drop-in replacement for TCP\nw.r.t. SELinux, so test it in addition to TCP using the same tests.\n\nThis requires modifying the inet_socket test to test each protocol\nseparately, using the same subdirectory symlink trick as in the\n[fs_]filesystem tests. After that, an mptcp subtest can be added easily\nby extending the programs to support it and adding a new subdirectory\nsymlink for it.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/inet_socket: cover the MPTCP protocol"}},{"before":null,"after":"17fecc443e267407f2f48e2cb17fbe83699f235d","ref":"refs/heads/main","pushedAt":"2023-05-24T19:42:16.733Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"pcmoore","name":"Paul Moore","path":"/pcmoore","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/8494929?s=80&v=4"},"commit":{"message":"tests/atsecure: avoid running bash under test domains\n\nThe 'env' utility can be used just as well. This avoids the \"bash:\n/root/.bashrc: Permission denied\" error message that appears when the\ntestsuite is ran with a terminal attached to the stdout/stdin and the\ncorresponding AVC denials.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/atsecure: avoid running bash under test domains"}},{"before":"1c0b28e34eb7763190e3a87966cab82d9fcb50fa","after":"17fecc443e267407f2f48e2cb17fbe83699f235d","ref":"refs/heads/master","pushedAt":"2023-03-16T09:24:25.600Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"tests/atsecure: avoid running bash under test domains\n\nThe 'env' utility can be used just as well. This avoids the \"bash:\n/root/.bashrc: Permission denied\" error message that appears when the\ntestsuite is ran with a terminal attached to the stdout/stdin and the\ncorresponding AVC denials.\n\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"tests/atsecure: avoid running bash under test domains"}},{"before":"65cbbb8c4a4cafd1b307bfbd954acd7c5a653bb8","after":"1c0b28e34eb7763190e3a87966cab82d9fcb50fa","ref":"refs/heads/master","pushedAt":"2023-03-13T13:42:19.331Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"defconfig: add FAT and GRE config options\n\nThese are required for some of the fat filesystem and sctp tests to run.\n\nSigned-off-by: Stephen Smalley ","shortMessageHtmlLink":"defconfig: add FAT and GRE config options"}},{"before":"4b4922e115e2058a3c49394b191248f560797eb2","after":"65cbbb8c4a4cafd1b307bfbd954acd7c5a653bb8","ref":"refs/heads/master","pushedAt":"2023-03-09T10:06:32.686Z","pushType":"push","commitsCount":1,"pusher":{"login":"WOnder93","name":"Ondrej Mosnáček","path":"/WOnder93","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/3041388?s=80&v=4"},"commit":{"message":"README.md: reflect new dependency on rdma-core-devel\n\nAfter the switch to enabling the InfiniBand tests dynamically,\nrdma-core-devel (formerly libibverbs-devel) is needed to build the\ntestsuite. Update README.md to reflect this.\n\nFixes: 4b4922e115e2 (\"tests/infiniband*: simplify test activation\")\nSigned-off-by: Ondrej Mosnacek ","shortMessageHtmlLink":"README.md: reflect new dependency on rdma-core-devel"}}],"hasNextPage":false,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xMFQxMjo1NjoxOC4wMDAwMDBazwAAAASyDw97","startCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0xMFQxMjo1NjoxOC4wMDAwMDBazwAAAASyDw97","endCursor":"Y3Vyc29yOnYyOpK7MjAyMy0wMy0wOVQxMDowNjozMi42ODY2ODdazwAAAAL_v0oH"}},"title":"Activity · SELinuxProject/selinux-testsuite"}