Hi Dan, On Fri, Oct 09, Dan Čermák wrote:
Hi Thorsten,
Thorsten Kukuk <kukuk@suse.de> writes:
Hi,
On Fri, Oct 09, Dominique Leuenberger / DimStar wrote:
* SELinux 3.1
While this sounds like a minor (3.0 -> 3.1) update of SELinux, Dominique forgot to write something really important: the selinux-policy is back!
If somebody is interested in continuing/helping to cleanup the SELinux packages, write testcases for SELinux in openQA, that no update breaks this, etc.
Do you know a good intro to SELinux? I have some experience with openQA and would like to contribute test cases, but lack any relevant SELinux knowledge.
Or do you have some ideas for test cases?
If I remember correct there should be some openQA tests already coming from SLE, a good start would be to rework this so that only the packages from the distribution and not some devel projects are used. Else the most important steps to test on Tumbleweed are: - Install selinux-policy-targed - Boot with SELinux enabled in enforced mode - You should be able to login and there should be no denied actions If we have SELinux support in transactional-update/MicroOS installer, the next level would be: - Start a busybox container with two volumes mounted: - one the container is allowed to access - one the container is not allowed to access In the first case, you should be able to read a file from inside the container, in the second case you should get a permission denied. Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect SLES & MicroOS SUSE Software Solutions Germany GmbH, Maxfeldstr. 5, 90409 Nuernberg, Germany Managing Director: Felix Imendoerffer (HRB 36809, AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org