1791cb42fc
Add new test suite for semanage_ibendport_* functions. The test suite aims for line coverage and covers expected usage of functions. The test suite uses custom semanage store and policy written in CIL, it does not require running on SELinux enabled system. Signed-off-by: Jan Zarsky <jzarsky@redhat.com>
28 lines
951 B
Text
28 lines
951 B
Text
(typeattribute cil_gen_require)
|
|
(roleattribute cil_gen_require)
|
|
(handleunknown allow)
|
|
(mls true)
|
|
(policycap network_peer_controls)
|
|
(policycap open_perms)
|
|
(sid security)
|
|
(sidorder (security))
|
|
(sensitivity s0)
|
|
(sensitivityorder (s0))
|
|
(user system_u)
|
|
(userrole system_u object_r)
|
|
(userlevel system_u (s0))
|
|
(userrange system_u ((s0) (s0)))
|
|
(role object_r)
|
|
(roletype object_r first_ibendport_t)
|
|
(roletype object_r second_ibendport_t)
|
|
(roletype object_r third_ibendport_t)
|
|
(type first_ibendport_t)
|
|
(type second_ibendport_t)
|
|
(type third_ibendport_t)
|
|
(sidcontext security (system_u object_r first_ibendport_t ((s0) (s0))))
|
|
(class test_class (test_perm))
|
|
(classorder (test_class))
|
|
(allow first_ibendport_t self (test_class (test_perm)))
|
|
(ibendportcon mlx4_0 1 (system_u object_r first_ibendport_t ((s0) (s0))))
|
|
(ibendportcon mlx4_1 2 (system_u object_r second_ibendport_t ((s0) (s0))))
|
|
(ibendportcon mlx4_1 3 (system_u object_r third_ibendport_t ((s0) (s0))))
|