Florence Blanc-Renaud 5c83ec06fa ipatests: set selinux context for fips mode ...

In order to test FIPS mode, the test is faking a user-space
FIPS environment by creating a file /var/tmp/userspace-fips
and bind-mounting this file as /proc/sys/crypto/fips_enabled

The security context needs to be properly set otherwise
/proc/sys/crypto/fips_enabled inherits the security context
unconfined_u:object_r:user_tmp_t:s0 and cannot be read,
resulting in the test seeing fips_mode=false.

Fixes: https://pagure.io/freeipa/issue/8868
Signed-off-by: Florence Blanc-Renaud <flo@redhat.com>
Reviewed-By: Rob Crittenden <rcritten@redhat.com>

2021-06-07 16:33:15 -04:00

..

integration

ipatests: set selinux context for fips mode

2021-06-07 16:33:15 -04:00

__init__.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

additional_config.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

beakerlib.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

declarative.py

Rename pytest_plugins to ipatests.pytest_ipa

2018-08-02 17:07:43 +02:00

deprecated_frameworks.py

ipatests: Don't turn Pytest IPA deprecation warnings into errors

2020-07-29 15:10:00 -04:00

nose_compat.py

ipatests: Remove no longer needed 'capture' compatibility

2020-04-21 13:24:50 +02:00

slicing.py

Make use of Azure Pipeline slicing

2019-07-16 13:23:21 +03:00