particle-os/debian-forge
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

test/stage/selinux: add check for new label option

Browse source 
Manually set a label for '/usr/bin/cp' to 'isntall_exec_t' and
verify it has been set correctly.
This commit is contained in:
Christian Kellner 2020-06-13 19:42:44 +02:00
parent d70c5a7334
commit 54dffeaaa0
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
test/data/stages/selinux/test_basic.json
View file

@ -1,6 +1,9 @@
{
"options": {
"file_contexts": "etc/selinux/targeted/contexts/files/file_contexts"
"file_contexts": "etc/selinux/targeted/contexts/files/file_contexts",
"labels": {
"/usr/bin/cp": "system_u:object_r:install_exec_t:s0"
}
},
"labels": {
"/bin": "system_u:object_r:bin_t:s0",
@ -10,6 +13,7 @@
"/home": "system_u:object_r:home_root_t:s0",
"/lib": "system_u:object_r:lib_t:s0",
"/usr": "system_u:object_r:usr_t:s0",
"/usr/bin/cp": "system_u:object_r:bin_t:s0"
"/usr/bin/ls": "system_u:object_r:bin_t:s0",
"/usr/bin/cp": "system_u:object_r:install_exec_t:s0"
}
}