SELinux userspace 3.5 release

- Attach tty to selinux-autorelabel.service when AUTORELABEL=0

.fmf/version

@@ -0,0 +1 @@
+1

.gitignore

@@ -344,3 +344,7 @@ policycoreutils-2.0.83.tgz
 /selinux-3.4-rc2.tar.gz
 /selinux-3.4-rc3.tar.gz
 /selinux-3.4.tar.gz
+/selinux-3.5-rc1.tar.gz
+/selinux-3.5-rc2.tar.gz
+/selinux-3.5-rc3.tar.gz
+/selinux-3.5.tar.gz

0001-sandbox-add-reset-to-Xephyr-as-it-works-better-with-.patch

@@ -1,4 +1,4 @@
-From f361ee407490bc74b43ec408b1edc70cd647d4e0 Mon Sep 17 00:00:00 2001
+From eabd9ffb34666ef467106ef10d8a0e98bbe35f79 Mon Sep 17 00:00:00 2001
 From: Petr Lautrbach <plautrba@redhat.com>
 Date: Thu, 20 Aug 2015 12:58:41 +0200
 Subject: [PATCH] sandbox: add -reset to Xephyr as it works better with it in
@@ -23,5 +23,5 @@ index eaa500d08143..4774528027ef 100644
      cat > ~/seremote << __EOF
  #!/bin/sh
 -- 
-2.35.1
+2.39.1
 

0002-Don-t-be-verbose-if-you-are-not-on-a-tty.patch

@@ -1,4 +1,4 @@
-From f204dd292340689c2d7ab75612b9fd81337fcbc3 Mon Sep 17 00:00:00 2001
+From 4affa1d7888b8489058d2942ea4431ff65f2430e Mon Sep 17 00:00:00 2001
 From: Dan Walsh <dwalsh@redhat.com>
 Date: Fri, 14 Feb 2014 12:32:12 -0500
 Subject: [PATCH] Don't be verbose if you are not on a tty
@@ -9,7 +9,7 @@ Content-type: text/plain
  1 file changed, 1 insertion(+)
 
 diff --git a/policycoreutils/scripts/fixfiles b/policycoreutils/scripts/fixfiles
-index c72ca0eb9d61..163ebcd1f232 100755
+index 166af6f360a2..ebe64563c7d7 100755
 --- a/policycoreutils/scripts/fixfiles
 +++ b/policycoreutils/scripts/fixfiles
 @@ -108,6 +108,7 @@ exclude_dirs_from_relabelling() {
@@ -21,5 +21,5 @@ index c72ca0eb9d61..163ebcd1f232 100755
  THREADS=""
  RPMFILES=""
 -- 
-2.35.1
+2.39.1
 

0002-Fix-STANDARD_FILE_CONTEXT-section-in-man-pages.patch

@@ -1,47 +0,0 @@
-From 71a2f14767c0ec70c23ecce43d7cbc5404c95552 Mon Sep 17 00:00:00 2001
-From: Dan Walsh <dwalsh@redhat.com>
-Date: Mon, 21 Apr 2014 13:54:40 -0400
-Subject: [PATCH] Fix STANDARD_FILE_CONTEXT section in man pages
-Content-type: text/plain
-
-Signed-off-by: Miroslav Grepl <mgrepl@redhat.com>
----
- python/sepolicy/sepolicy/manpage.py | 7 +++++--
- 1 file changed, 5 insertions(+), 2 deletions(-)
-
-diff --git a/python/sepolicy/sepolicy/manpage.py b/python/sepolicy/sepolicy/manpage.py
-index 3e61e333193f..82338aeeef32 100755
---- a/python/sepolicy/sepolicy/manpage.py
-+++ b/python/sepolicy/sepolicy/manpage.py
-@@ -737,10 +737,13 @@ Default Defined Ports:""")
- 
-     def _file_context(self):
-         flist = []
-+        flist_non_exec = []
-         mpaths = []
-         for f in self.all_file_types:
-             if f.startswith(self.domainname):
-                 flist.append(f)
-+                if not file_type_is_executable(f) or not file_type_is_entrypoint(f):
-+                    flist_non_exec.append(f)
-                 if f in self.fcdict:
-                     mpaths = mpaths + self.fcdict[f]["regex"]
-         if len(mpaths) == 0:
-@@ -799,12 +802,12 @@ SELinux %(domainname)s policy is very flexible allowing users to setup their %(d
- SELinux defines the file context types for the %(domainname)s, if you wanted to
- store files with these types in a diffent paths, you need to execute the semanage command to specify alternate labeling and then use restorecon to put the labels on disk.
- 
--.B semanage fcontext -a -t %(type)s '/srv/%(domainname)s/content(/.*)?'
-+.B semanage fcontext -a -t %(type)s '/srv/my%(domainname)s_content(/.*)?'
- .br
- .B restorecon -R -v /srv/my%(domainname)s_content
- 
- Note: SELinux often uses regular expressions to specify labels that match multiple files.
--""" % {'domainname': self.domainname, "type": flist[0]})
-+""" % {'domainname': self.domainname, "type": flist_non_exec[-1]})
- 
-         self.fd.write(r"""
- .I The following file types are defined for %(domainname)s:
--- 
-2.35.1
-

0003-If-there-is-no-executable-we-don-t-want-to-print-a-p.patch

@@ -1,28 +0,0 @@
-From d55a06c002641dce1301b9b5639bd8e206460724 Mon Sep 17 00:00:00 2001
-From: Miroslav Grepl <mgrepl@redhat.com>
-Date: Mon, 12 May 2014 14:11:22 +0200
-Subject: [PATCH] If there is no executable we don't want to print a part of
- STANDARD FILE CONTEXT
-Content-type: text/plain
-
----
- python/sepolicy/sepolicy/manpage.py | 3 ++-
- 1 file changed, 2 insertions(+), 1 deletion(-)
-
-diff --git a/python/sepolicy/sepolicy/manpage.py b/python/sepolicy/sepolicy/manpage.py
-index 82338aeeef32..ec8aa1cb94a2 100755
---- a/python/sepolicy/sepolicy/manpage.py
-+++ b/python/sepolicy/sepolicy/manpage.py
-@@ -795,7 +795,8 @@ SELinux %(domainname)s policy is very flexible allowing users to setup their %(d
- .PP
- """ % {'domainname': self.domainname, 'equiv': e, 'alt': e.split('/')[-1]})
- 
--        self.fd.write(r"""
-+        if flist_non_exec:
-+            self.fd.write(r"""
- .PP
- .B STANDARD FILE CONTEXT
- 
--- 
-2.35.1
-

0003-sepolicy-generate-Handle-more-reserved-port-types.patch

@@ -1,4 +1,4 @@
-From d8f51aa7d299383247213b69ec7cbb68c1fa3bc4 Mon Sep 17 00:00:00 2001
+From dbebbe4ff79fe790425ca8740e5ace54396671f2 Mon Sep 17 00:00:00 2001
 From: Masatake YAMATO <yamato@redhat.com>
 Date: Thu, 14 Dec 2017 15:57:58 +0900
 Subject: [PATCH] sepolicy-generate: Handle more reserved port types
@@ -53,10 +53,10 @@ https://lore.kernel.org/selinux/20150610.190635.1866127952891120915.yamato@redha
  1 file changed, 3 insertions(+), 1 deletion(-)
 
 diff --git a/python/sepolicy/sepolicy/generate.py b/python/sepolicy/sepolicy/generate.py
-index 43180ca6fda4..d60a08e1d72c 100644
+index b6df3e91160b..36a3ea1196b1 100644
 --- a/python/sepolicy/sepolicy/generate.py
 +++ b/python/sepolicy/sepolicy/generate.py
-@@ -99,7 +99,9 @@ def get_all_ports():
+@@ -100,7 +100,9 @@ def get_all_ports():
      for p in sepolicy.info(sepolicy.PORT):
          if p['type'] == "reserved_port_t" or \
                  p['type'] == "port_t" or \
@@ -68,5 +68,5 @@ index 43180ca6fda4..d60a08e1d72c 100644
          dict[(p['low'], p['high'], p['protocol'])] = (p['type'], p.get('range'))
      return dict
 -- 
-2.35.1
+2.39.1
 

0004-Simplication-of-sepolicy-manpage-web-functionality.-.patch

@@ -1,170 +0,0 @@
-From b180f7679c5e09535416f47d48afd0c0738f5fa9 Mon Sep 17 00:00:00 2001
-From: Miroslav Grepl <mgrepl@redhat.com>
-Date: Thu, 19 Feb 2015 17:45:15 +0100
-Subject: [PATCH] Simplication of sepolicy-manpage web functionality.
- system_release is no longer hardcoded and it creates only index.html and html
- man pages in the directory for the system release.
-Content-type: text/plain
-
----
- python/sepolicy/sepolicy/__init__.py | 25 +++--------
- python/sepolicy/sepolicy/manpage.py  | 65 +++-------------------------
- 2 files changed, 13 insertions(+), 77 deletions(-)
-
-diff --git a/python/sepolicy/sepolicy/__init__.py b/python/sepolicy/sepolicy/__init__.py
-index 203ca25f4210..9447812b7450 100644
---- a/python/sepolicy/sepolicy/__init__.py
-+++ b/python/sepolicy/sepolicy/__init__.py
-@@ -1225,27 +1225,14 @@ def boolean_desc(boolean):
- 
- 
- def get_os_version():
--    os_version = ""
--    pkg_name = "selinux-policy"
-+    system_release = ""
-     try:
--        try:
--            from commands import getstatusoutput
--        except ImportError:
--            from subprocess import getstatusoutput
--        rc, output = getstatusoutput("rpm -q '%s'" % pkg_name)
--        if rc == 0:
--            os_version = output.split(".")[-2]
--    except:
--        os_version = ""
--
--    if os_version[0:2] == "fc":
--        os_version = "Fedora" + os_version[2:]
--    elif os_version[0:2] == "el":
--        os_version = "RHEL" + os_version[2:]
--    else:
--        os_version = ""
-+        with open('/etc/system-release') as f:
-+            system_release = f.readline()
-+    except IOError:
-+        system_release = "Misc"
- 
--    return os_version
-+    return system_release
- 
- 
- def reinit():
-diff --git a/python/sepolicy/sepolicy/manpage.py b/python/sepolicy/sepolicy/manpage.py
-index ec8aa1cb94a2..c632d05dbb1b 100755
---- a/python/sepolicy/sepolicy/manpage.py
-+++ b/python/sepolicy/sepolicy/manpage.py
-@@ -151,10 +151,6 @@ def prettyprint(f, trim):
- manpage_domains = []
- manpage_roles = []
- 
--fedora_releases = ["Fedora17", "Fedora18"]
--rhel_releases = ["RHEL6", "RHEL7"]
--
--
- def get_alphabet_manpages(manpage_list):
-     alphabet_manpages = dict.fromkeys(string.ascii_letters, [])
-     for i in string.ascii_letters:
-@@ -184,7 +180,7 @@ def convert_manpage_to_html(html_manpage, manpage):
- class HTMLManPages:
- 
-     """
--            Generate a HHTML Manpages on an given SELinux domains
-+            Generate a HTML Manpages on an given SELinux domains
-     """
- 
-     def __init__(self, manpage_roles, manpage_domains, path, os_version):
-@@ -192,9 +188,9 @@ class HTMLManPages:
-         self.manpage_domains = get_alphabet_manpages(manpage_domains)
-         self.os_version = os_version
-         self.old_path = path + "/"
--        self.new_path = self.old_path + self.os_version + "/"
-+        self.new_path = self.old_path
- 
--        if self.os_version in fedora_releases or self.os_version in rhel_releases:
-+        if self.os_version:
-             self.__gen_html_manpages()
-         else:
-             print("SELinux HTML man pages can not be generated for this %s" % os_version)
-@@ -203,7 +199,6 @@ class HTMLManPages:
-     def __gen_html_manpages(self):
-         self._write_html_manpage()
-         self._gen_index()
--        self._gen_body()
-         self._gen_css()
- 
-     def _write_html_manpage(self):
-@@ -221,67 +216,21 @@ class HTMLManPages:
-                     convert_manpage_to_html((self.new_path + r.rsplit("_selinux", 1)[0] + ".html"), self.old_path + r)
- 
-     def _gen_index(self):
--        index = self.old_path + "index.html"
--        fd = open(index, 'w')
--        fd.write("""
--<html>
--<head>
--    <link rel=stylesheet type="text/css" href="style.css" title="style">
--    <title>SELinux man pages online</title>
--</head>
--<body>
--<h1>SELinux man pages</h1>
--<br></br>
--Fedora or Red Hat Enterprise Linux Man Pages.</h2>
--<br></br>
--<hr>
--<h3>Fedora</h3>
--<table><tr>
--<td valign="middle">
--</td>
--</tr></table>
--<pre>
--""")
--        for f in fedora_releases:
--            fd.write("""
--<a href=%s/%s.html>%s</a> - SELinux man pages for %s """ % (f, f, f, f))
--
--        fd.write("""
--</pre>
--<hr>
--<h3>RHEL</h3>
--<table><tr>
--<td valign="middle">
--</td>
--</tr></table>
--<pre>
--""")
--        for r in rhel_releases:
--            fd.write("""
--<a href=%s/%s.html>%s</a> - SELinux man pages for %s """ % (r, r, r, r))
--
--        fd.write("""
--</pre>
--	""")
--        fd.close()
--        print("%s has been created" % index)
--
--    def _gen_body(self):
-         html = self.new_path + self.os_version + ".html"
-         fd = open(html, 'w')
-         fd.write("""
- <html>
- <head>
--	<link rel=stylesheet type="text/css" href="../style.css" title="style">
--	<title>Linux man-pages online for Fedora18</title>
-+	<link rel=stylesheet type="text/css" href="style.css" title="style">
-+	<title>SELinux man pages online</title>
- </head>
- <body>
--<h1>SELinux man pages for Fedora18</h1>
-+<h1>SELinux man pages for %s</h1>
- <hr>
- <table><tr>
- <td valign="middle">
- <h3>SELinux roles</h3>
--""")
-+""" % self.os_version)
-         for letter in self.manpage_roles:
-             if len(self.manpage_roles[letter]):
-                 fd.write("""
--- 
-2.35.1
-

0004-sandbox-Use-matchbox-window-manager-instead-of-openb.patch

@@ -1,4 +1,4 @@
-From 8054dc44cf105b959864a1424fe857fac3ba3d73 Mon Sep 17 00:00:00 2001
+From 42b676e7677d4efe5383558afb3de962948f7a1d Mon Sep 17 00:00:00 2001
 From: Petr Lautrbach <plautrba@redhat.com>
 Date: Wed, 18 Jul 2018 09:09:35 +0200
 Subject: [PATCH] sandbox: Use matchbox-window-manager instead of openbox
@@ -11,10 +11,10 @@ Content-type: text/plain
  3 files changed, 3 insertions(+), 17 deletions(-)
 
 diff --git a/sandbox/sandbox b/sandbox/sandbox
-index 16c43b51eaaa..7709a6585665 100644
+index a2762a7d215a..a32a33ea3cf6 100644
 --- a/sandbox/sandbox
 +++ b/sandbox/sandbox
-@@ -268,7 +268,7 @@ class Sandbox:
+@@ -270,7 +270,7 @@ class Sandbox:
              copyfile(f, "/tmp", self.__tmpdir)
              copyfile(f, "/var/tmp", self.__tmpdir)
  
@@ -23,7 +23,7 @@ index 16c43b51eaaa..7709a6585665 100644
          execfile = self.__homedir + "/.sandboxrc"
          fd = open(execfile, "w+")
          if self.__options.session:
-@@ -362,7 +362,7 @@ sandbox [-h] [-l level ] [-[X|M] [-H homedir] [-T tempdir]] [-I includefile ] [-
+@@ -369,7 +369,7 @@ sandbox [-h] [-l level ] [-[X|M] [-H homedir] [-T tempdir]] [-I includefile ] [-
  
          parser.add_option("-W", "--windowmanager", dest="wm",
                            type="string",
@@ -33,10 +33,10 @@ index 16c43b51eaaa..7709a6585665 100644
  
          parser.add_option("-l", "--level", dest="level",
 diff --git a/sandbox/sandbox.8 b/sandbox/sandbox.8
-index d83fee76f335..90ef4951c8c2 100644
+index 1ee0ecea96d1..775e4b231204 100644
 --- a/sandbox/sandbox.8
 +++ b/sandbox/sandbox.8
-@@ -77,7 +77,7 @@ Specifies the windowsize when creating an X based Sandbox. The default windowsiz
+@@ -80,7 +80,7 @@ Specifies the windowsize when creating an X based Sandbox. The default windowsiz
  \fB\-W\fR \fB\-\-windowmanager\fR
  Select alternative window manager to run within 
  .B sandbox \-X.
@@ -71,5 +71,5 @@ index 4774528027ef..c211ebc14549 100644
      export DISPLAY=:$D
      cat > ~/seremote << __EOF
 -- 
-2.35.1
+2.39.1
 

0005-Use-SHA-2-instead-of-SHA-1.patch

@@ -1,4 +1,4 @@
-From 53d085d8d6edc05886d473e412a8025b7f8d9ce4 Mon Sep 17 00:00:00 2001
+From 74e2d05df2ed090909c0ac6fd7ff7816b94d83ce Mon Sep 17 00:00:00 2001
 From: Petr Lautrbach <plautrba@redhat.com>
 Date: Fri, 30 Jul 2021 14:14:37 +0200
 Subject: [PATCH] Use SHA-2 instead of SHA-1
@@ -254,10 +254,10 @@ index 910101452625..7f2daa09191b 100644
  , и, при условии, что НЕ установлен параметр
  .B \-n
 diff --git a/policycoreutils/setfiles/setfiles.8 b/policycoreutils/setfiles/setfiles.8
-index 19b59a2cc90d..bad9f37a9ac4 100644
+index bf26e161a71d..36fe6b369548 100644
 --- a/policycoreutils/setfiles/setfiles.8
 +++ b/policycoreutils/setfiles/setfiles.8
-@@ -87,14 +87,14 @@ display usage information and exit.
+@@ -95,14 +95,14 @@ display usage information and exit.
  ignore files that do not exist.
  .TP
  .B \-I
@@ -275,7 +275,7 @@ index 19b59a2cc90d..bad9f37a9ac4 100644
  enable usage of the
  .IR security.sehash
  extended attribute.
-@@ -239,7 +239,7 @@ the
+@@ -261,7 +261,7 @@ the
  .B \-D
  option to
  .B setfiles
@@ -284,7 +284,7 @@ index 19b59a2cc90d..bad9f37a9ac4 100644
  .B spec_file
  set in an extended attribute named
  .IR security.sehash
-@@ -260,7 +260,7 @@ for further details.
+@@ -282,7 +282,7 @@ for further details.
  .sp
  The
  .B \-I
@@ -294,5 +294,5 @@ index 19b59a2cc90d..bad9f37a9ac4 100644
  and provided the
  .B \-n
 -- 
-2.35.1
+2.39.1
 

0005-We-want-to-remove-the-trailing-newline-for-etc-syste.patch

@@ -1,27 +0,0 @@
-From 1747f59fece8183772e5591ce5b5feb5f421f602 Mon Sep 17 00:00:00 2001
-From: Miroslav Grepl <mgrepl@redhat.com>
-Date: Fri, 20 Feb 2015 16:42:01 +0100
-Subject: [PATCH] We want to remove the trailing newline for
- /etc/system_release.
-Content-type: text/plain
-
----
- python/sepolicy/sepolicy/__init__.py | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/python/sepolicy/sepolicy/__init__.py b/python/sepolicy/sepolicy/__init__.py
-index 9447812b7450..aa8beda313c8 100644
---- a/python/sepolicy/sepolicy/__init__.py
-+++ b/python/sepolicy/sepolicy/__init__.py
-@@ -1228,7 +1228,7 @@ def get_os_version():
-     system_release = ""
-     try:
-         with open('/etc/system-release') as f:
--            system_release = f.readline()
-+            system_release = f.readline().rstrip()
-     except IOError:
-         system_release = "Misc"
- 
--- 
-2.35.1
-

0006-Fix-title-in-manpage.py-to-not-contain-online.patch

@@ -1,26 +0,0 @@
-From 0bd28bc715034c644405d3c03f160d69ae710500 Mon Sep 17 00:00:00 2001
-From: Miroslav Grepl <mgrepl@redhat.com>
-Date: Fri, 20 Feb 2015 16:42:53 +0100
-Subject: [PATCH] Fix title in manpage.py to not contain 'online'.
-Content-type: text/plain
-
----
- python/sepolicy/sepolicy/manpage.py | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/python/sepolicy/sepolicy/manpage.py b/python/sepolicy/sepolicy/manpage.py
-index c632d05dbb1b..3ae2f42b2fdf 100755
---- a/python/sepolicy/sepolicy/manpage.py
-+++ b/python/sepolicy/sepolicy/manpage.py
-@@ -222,7 +222,7 @@ class HTMLManPages:
- <html>
- <head>
- 	<link rel=stylesheet type="text/css" href="style.css" title="style">
--	<title>SELinux man pages online</title>
-+	<title>SELinux man pages</title>
- </head>
- <body>
- <h1>SELinux man pages for %s</h1>
--- 
-2.35.1
-

0011-sepolicy-Drop-old-interface-file_type_is_executable-.patch

@@ -1,64 +0,0 @@
-From 3748b7eab7434698998edfcf613fe738cf19d5c9 Mon Sep 17 00:00:00 2001
-From: Petr Lautrbach <plautrba@redhat.com>
-Date: Mon, 27 Feb 2017 17:12:39 +0100
-Subject: [PATCH] sepolicy: Drop old interface file_type_is_executable(f) and
- file_type_is_entrypoint(f)
-Content-type: text/plain
-
-- use direct queries
-- load exec_types and entry_types only once
----
- python/sepolicy/sepolicy/manpage.py | 22 ++++++++++++++++++++--
- 1 file changed, 20 insertions(+), 2 deletions(-)
-
-diff --git a/python/sepolicy/sepolicy/manpage.py b/python/sepolicy/sepolicy/manpage.py
-index 3ae2f42b2fdf..5a434bd360ae 100755
---- a/python/sepolicy/sepolicy/manpage.py
-+++ b/python/sepolicy/sepolicy/manpage.py
-@@ -127,8 +127,24 @@ def gen_domains():
-     domains.sort()
-     return domains
- 
--types = None
- 
-+exec_types = None
-+
-+def _gen_exec_types():
-+    global exec_types
-+    if exec_types is None:
-+        exec_types = next(sepolicy.info(sepolicy.ATTRIBUTE, "exec_type"))["types"]
-+    return exec_types
-+
-+entry_types = None
-+
-+def _gen_entry_types():
-+    global entry_types
-+    if entry_types is None:
-+        entry_types = next(sepolicy.info(sepolicy.ATTRIBUTE, "entry_type"))["types"]
-+    return entry_types
-+
-+types = None
- 
- def _gen_types():
-     global types
-@@ -374,6 +390,8 @@ class ManPage:
-         self.all_file_types = sepolicy.get_all_file_types()
-         self.role_allows = sepolicy.get_all_role_allows()
-         self.types = _gen_types()
-+        self.exec_types = _gen_exec_types()
-+        self.entry_types = _gen_entry_types()
- 
-         if self.source_files:
-             self.fcpath = self.root + "file_contexts"
-@@ -691,7 +709,7 @@ Default Defined Ports:""")
-         for f in self.all_file_types:
-             if f.startswith(self.domainname):
-                 flist.append(f)
--                if not file_type_is_executable(f) or not file_type_is_entrypoint(f):
-+                if f not in self.exec_types or f not in self.entry_types:
-                     flist_non_exec.append(f)
-                 if f in self.fcdict:
-                     mpaths = mpaths + self.fcdict[f]["regex"]
--- 
-2.35.1
-

0012-gettext-handle-unsupported-languages-properly.patch

@@ -1,349 +0,0 @@
-From ff2aba6d202f49749cbb19a84bf0e1cdae54c5e9 Mon Sep 17 00:00:00 2001
-From: Vit Mojzis <vmojzis@redhat.com>
-Date: Fri, 24 Jun 2022 16:24:25 +0200
-Subject: [PATCH] gettext: handle unsupported languages properly
-Content-type: text/plain
-
-With "fallback=True" gettext.translation behaves the same as
-gettext.install and uses NullTranslations in case the
-translation file for given language was not found (as opposed to
-throwing an exception).
-
-Fixes:
-  # LANG is set to any "unsupported" language, e.g. en_US.UTF-8
-  $ chcat --help
-  Traceback (most recent call last):
-  File "/usr/bin/chcat", line 39, in <module>
-    t = gettext.translation(PROGNAME,
-  File "/usr/lib64/python3.9/gettext.py", line 592, in translation
-    raise FileNotFoundError(ENOENT,
-  FileNotFoundError: [Errno 2] No translation file found for domain: 'selinux-python'
-
-Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
-Reviewed-by: Daniel Burgener <dburgener@linux.microsoft.com>
-Acked-by: Petr Lautrbach <plautrba@redhat.com>
----
- gui/booleansPage.py                          | 3 ++-
- gui/domainsPage.py                           | 3 ++-
- gui/fcontextPage.py                          | 3 ++-
- gui/loginsPage.py                            | 3 ++-
- gui/modulesPage.py                           | 3 ++-
- gui/polgengui.py                             | 3 ++-
- gui/portsPage.py                             | 3 ++-
- gui/semanagePage.py                          | 3 ++-
- gui/statusPage.py                            | 3 ++-
- gui/system-config-selinux.py                 | 3 ++-
- gui/usersPage.py                             | 3 ++-
- python/chcat/chcat                           | 5 +++--
- python/semanage/semanage                     | 3 ++-
- python/semanage/seobject.py                  | 3 ++-
- python/sepolgen/src/sepolgen/sepolgeni18n.py | 4 +++-
- python/sepolicy/sepolicy.py                  | 3 ++-
- python/sepolicy/sepolicy/__init__.py         | 3 ++-
- python/sepolicy/sepolicy/generate.py         | 3 ++-
- python/sepolicy/sepolicy/gui.py              | 3 ++-
- python/sepolicy/sepolicy/interface.py        | 3 ++-
- sandbox/sandbox                              | 3 ++-
- 21 files changed, 44 insertions(+), 22 deletions(-)
-
-diff --git a/gui/booleansPage.py b/gui/booleansPage.py
-index 5beec58bc360..ad11a9b24c79 100644
---- a/gui/booleansPage.py
-+++ b/gui/booleansPage.py
-@@ -46,7 +46,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/domainsPage.py b/gui/domainsPage.py
-index e08f34b4d3a9..e6eadd61c1bc 100644
---- a/gui/domainsPage.py
-+++ b/gui/domainsPage.py
-@@ -38,7 +38,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/fcontextPage.py b/gui/fcontextPage.py
-index bac2bec3ebbd..767664f26ec8 100644
---- a/gui/fcontextPage.py
-+++ b/gui/fcontextPage.py
-@@ -55,7 +55,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/loginsPage.py b/gui/loginsPage.py
-index 18b93d8c9756..7e08232a90b5 100644
---- a/gui/loginsPage.py
-+++ b/gui/loginsPage.py
-@@ -37,7 +37,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/modulesPage.py b/gui/modulesPage.py
-index c546d455d4cd..02b79f150a13 100644
---- a/gui/modulesPage.py
-+++ b/gui/modulesPage.py
-@@ -38,7 +38,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/polgengui.py b/gui/polgengui.py
-index a18f1cba17b9..7a3ecd50c91c 100644
---- a/gui/polgengui.py
-+++ b/gui/polgengui.py
-@@ -71,7 +71,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/portsPage.py b/gui/portsPage.py
-index 54aa80ded327..bee2bdf17b99 100644
---- a/gui/portsPage.py
-+++ b/gui/portsPage.py
-@@ -43,7 +43,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/semanagePage.py b/gui/semanagePage.py
-index 1371d4e7dabe..efad14d9b375 100644
---- a/gui/semanagePage.py
-+++ b/gui/semanagePage.py
-@@ -30,7 +30,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/statusPage.py b/gui/statusPage.py
-index c241ef83dfa0..832849e60d60 100644
---- a/gui/statusPage.py
-+++ b/gui/statusPage.py
-@@ -43,7 +43,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/system-config-selinux.py b/gui/system-config-selinux.py
-index 1b460c99363b..9f53b7fe9020 100644
---- a/gui/system-config-selinux.py
-+++ b/gui/system-config-selinux.py
-@@ -53,7 +53,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/gui/usersPage.py b/gui/usersPage.py
-index d51bd968b77e..9acd3b844056 100644
---- a/gui/usersPage.py
-+++ b/gui/usersPage.py
-@@ -37,7 +37,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/python/chcat/chcat b/python/chcat/chcat
-index e779fcc6ebd7..952cb8187599 100755
---- a/python/chcat/chcat
-+++ b/python/chcat/chcat
-@@ -38,9 +38,10 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
--except ImportError:
-+except:
-     try:
-         import builtins
-         builtins.__dict__['_'] = str
-diff --git a/python/semanage/semanage b/python/semanage/semanage
-index 8f4e44a7a9cd..f45061a601f9 100644
---- a/python/semanage/semanage
-+++ b/python/semanage/semanage
-@@ -38,7 +38,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/python/semanage/seobject.py b/python/semanage/seobject.py
-index ff8f4e9c3008..0782c082dc0c 100644
---- a/python/semanage/seobject.py
-+++ b/python/semanage/seobject.py
-@@ -42,7 +42,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/python/sepolgen/src/sepolgen/sepolgeni18n.py b/python/sepolgen/src/sepolgen/sepolgeni18n.py
-index 56ebd807c69c..1ff307d9b27d 100644
---- a/python/sepolgen/src/sepolgen/sepolgeni18n.py
-+++ b/python/sepolgen/src/sepolgen/sepolgeni18n.py
-@@ -19,7 +19,9 @@
- 
- try: 
-     import gettext
--    t = gettext.translation( 'selinux-python' )
-+    t = gettext.translation("selinux-python",
-+                        localedir="/usr/share/locale",
-+                        fallback=True)
-     _ = t.gettext
- except:
-     def _(str):
-diff --git a/python/sepolicy/sepolicy.py b/python/sepolicy/sepolicy.py
-index 7ebe0efa88a1..c7a70e094b0c 100755
---- a/python/sepolicy/sepolicy.py
-+++ b/python/sepolicy/sepolicy.py
-@@ -36,7 +36,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/python/sepolicy/sepolicy/__init__.py b/python/sepolicy/sepolicy/__init__.py
-index 95520f9bc35d..6bde1971fd7c 100644
---- a/python/sepolicy/sepolicy/__init__.py
-+++ b/python/sepolicy/sepolicy/__init__.py
-@@ -31,7 +31,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/python/sepolicy/sepolicy/generate.py b/python/sepolicy/sepolicy/generate.py
-index 3e8b9f9c291d..eff3a8973917 100644
---- a/python/sepolicy/sepolicy/generate.py
-+++ b/python/sepolicy/sepolicy/generate.py
-@@ -56,7 +56,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/python/sepolicy/sepolicy/gui.py b/python/sepolicy/sepolicy/gui.py
-index b0263740a79f..5bdbfebade1d 100644
---- a/python/sepolicy/sepolicy/gui.py
-+++ b/python/sepolicy/sepolicy/gui.py
-@@ -49,7 +49,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/python/sepolicy/sepolicy/interface.py b/python/sepolicy/sepolicy/interface.py
-index 599f97fdc6e7..43f86443f2c8 100644
---- a/python/sepolicy/sepolicy/interface.py
-+++ b/python/sepolicy/sepolicy/interface.py
-@@ -38,7 +38,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
-diff --git a/sandbox/sandbox b/sandbox/sandbox
-index 3ef444a12561..53cc504149c9 100644
---- a/sandbox/sandbox
-+++ b/sandbox/sandbox
-@@ -45,7 +45,8 @@ try:
-         kwargs['unicode'] = True
-     t = gettext.translation(PROGNAME,
-                     localedir="/usr/share/locale",
--                    **kwargs)
-+                    **kwargs,
-+                    fallback=True)
-     _ = t.gettext
- except:
-     try:
--- 
-2.36.1
-

0013-semodule-rename-rebuild-if-modules-changed-to-refres.patch

@@ -1,82 +0,0 @@
-From afafe02fa9b6b7fdcce883c5e873d46b9d811d66 Mon Sep 17 00:00:00 2001
-From: Ondrej Mosnacek <omosnace@redhat.com>
-Date: Wed, 8 Jun 2022 19:09:54 +0200
-Subject: [PATCH] semodule: rename --rebuild-if-modules-changed to --refresh
-Content-type: text/plain
-
-After the last commit this option's name and description no longer
-matches the semantic, so give it a new one and update the descriptions.
-The old name is still recognized and aliased to the new one for
-backwards compatibility.
-
-Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
-Acked-by: Nicolas Iooss <nicolas.iooss@m4x.org>
----
- policycoreutils/semodule/semodule.8 | 12 ++++++------
- policycoreutils/semodule/semodule.c | 13 ++++++++++---
- 2 files changed, 16 insertions(+), 9 deletions(-)
-
-diff --git a/policycoreutils/semodule/semodule.8 b/policycoreutils/semodule/semodule.8
-index d1735d216276..c56e580f27b8 100644
---- a/policycoreutils/semodule/semodule.8
-+++ b/policycoreutils/semodule/semodule.8
-@@ -23,12 +23,12 @@ force a reload of policy
- .B \-B, \-\-build
- force a rebuild of policy (also reloads unless \-n is used)
- .TP
--.B \-\-rebuild-if-modules-changed
--Force a rebuild of the policy if any changes to module content are detected
--(by comparing with checksum from the last transaction).  One can use this
--instead of \-B to ensure that any changes to the module store done by an
--external tool (e.g. a package manager) are applied, while automatically
--skipping the rebuild if there are no new changes.
-+.B \-\-refresh
-+Like \-\-build, but reuses existing linked policy if no changes to module
-+files are detected (by comparing with checksum from the last transaction).
-+One can use this instead of \-B to ensure that any changes to the module
-+store done by an external tool (e.g. a package manager) are applied, while
-+automatically skipping the module re-linking if there are no module changes.
- .TP
- .B \-D, \-\-disable_dontaudit
- Temporarily remove dontaudits from policy.  Reverts whenever policy is rebuilt
-diff --git a/policycoreutils/semodule/semodule.c b/policycoreutils/semodule/semodule.c
-index 1ed8e69054e0..ec0794866daa 100644
---- a/policycoreutils/semodule/semodule.c
-+++ b/policycoreutils/semodule/semodule.c
-@@ -150,9 +150,12 @@ static void usage(char *progname)
- 	printf("  -c, --cil extract module as cil. This only affects module extraction.\n");
- 	printf("  -H, --hll extract module as hll. This only affects module extraction.\n");
- 	printf("  -m, --checksum   print module checksum (SHA256).\n");
--	printf("      --rebuild-if-modules-changed\n"
--	       "                   force policy rebuild if module content changed since\n"
--	       "                   last rebuild (based on checksum)\n");
-+	printf("      --refresh    like --build, but reuses existing linked policy if no\n"
-+	       "                   changes to module files are detected (via checksum)\n");
-+	printf("Deprecated options:\n");
-+	printf("  -b,--base	   same as --install\n");
-+	printf("  --rebuild-if-modules-changed\n"
-+	       "                   same as --refresh\n");
- }
- 
- /* Sets the global mode variable to new_mode, but only if no other
-@@ -185,6 +188,7 @@ static void parse_command_line(int argc, char **argv)
- {
- 	static struct option opts[] = {
- 		{"rebuild-if-modules-changed", 0, NULL, '\0'},
-+		{"refresh", 0, NULL, '\0'},
- 		{"store", required_argument, NULL, 's'},
- 		{"base", required_argument, NULL, 'b'},
- 		{"help", 0, NULL, 'h'},
-@@ -225,6 +229,9 @@ static void parse_command_line(int argc, char **argv)
- 		case '\0':
- 			switch(longind) {
- 			case 0: /* --rebuild-if-modules-changed */
-+				fprintf(stderr, "The --rebuild-if-modules-changed option is deprecated. Use --refresh instead.\n");
-+				/* fallthrough */
-+			case 1: /* --refresh */
- 				check_ext_changes = 1;
- 				break;
- 			default:
--- 
-2.36.1
-

0014-python-Split-semanage-import-into-two-transactions.patch

@@ -1,65 +0,0 @@
-From 4a53c0c3ee0edba37ba8e62064175c4928f761a8 Mon Sep 17 00:00:00 2001
-From: Vit Mojzis <vmojzis@redhat.com>
-Date: Mon, 30 May 2022 14:20:21 +0200
-Subject: [PATCH] python: Split "semanage import" into two transactions
-Content-type: text/plain
-
-First transaction applies all deletion operations, so that there are no
-collisions when applying the rest of the changes.
-
-Fixes:
-  # semanage port -a -t http_cache_port_t -r s0 -p tcp 3024
-  # semanage export | semanage import
-  ValueError: Port tcp/3024 already defined
-
-Signed-off-by: Vit Mojzis <vmojzis@redhat.com>
----
- python/semanage/semanage | 21 +++++++++++++++++++--
- 1 file changed, 19 insertions(+), 2 deletions(-)
-
-diff --git a/python/semanage/semanage b/python/semanage/semanage
-index f45061a601f9..4e8d64d6863a 100644
---- a/python/semanage/semanage
-+++ b/python/semanage/semanage
-@@ -853,10 +853,29 @@ def handleImport(args):
-     trans = seobject.semanageRecords(args)
-     trans.start()
- 
-+    deleteCommands = []
-+    commands = []
-+    # separate commands for deletion from the rest so they can be
-+    # applied in a separate transaction
-     for l in sys.stdin.readlines():
-         if len(l.strip()) == 0:
-             continue
-+        if "-d" in l or "-D" in l:
-+            deleteCommands.append(l)
-+        else:
-+            commands.append(l)
-+
-+    if deleteCommands:
-+        importHelper(deleteCommands)
-+        trans.finish()
-+        trans.start()
-+
-+    importHelper(commands)
-+    trans.finish()
- 
-+
-+def importHelper(commands):
-+    for l in commands:
-         try:
-             commandParser = createCommandParser()
-             args = commandParser.parse_args(mkargv(l))
-@@ -870,8 +889,6 @@ def handleImport(args):
-         except KeyboardInterrupt:
-             sys.exit(0)
- 
--    trans.finish()
--
- 
- def setupImportParser(subparsers):
-     importParser = subparsers.add_parser('import', help=_('Import local customizations'))
--- 
-2.36.1
-

README.translations

@@ -1,41 +1,49 @@
-policycoreutils translations currently live in the following locations:
+SELinux translations currently live in the following locations:
 
-- https://fedora.zanata.org/project/view/selinux
-  - contains translations for both stable (Red Hat Enterprise Linux) and master (Fedora) branches
+- https://translate.fedoraproject.org/projects/selinux/
+  - contains 2 versions of translatable strings rhel8 (latest RHEL 8 release) and main (Fedora and RHEL 9)
   - maintains large number of languages (several of which do not actually contain any translated strings)
   - updated by community and partially by RH localization effort
 
-- selinux source repository (https://github.com/fedora-selinux/selinux)
-  - is kept up-to-date with fedora.zanata
+- SELinux source repositories (periodicaly updated from weblate)
+  - https://github.com/fedora-selinux/selinux
+    - used for Fedora, latest CentOS and RHEL 9
+  - https://github.com/SELinuxProject/selinux
+    - upstream repository
 
-How to update source files on fedora.zanata:
+How to update source files on weblate:
   $ git clone git@github.com:fedora-selinux/selinux.git
   $ cd selinux
-
-  # generate new potfile
+  # generate new potfiles
   $ for p in policycoreutils python gui sandbox; do
     cd $p/po
+    rm $p.pot
     make $p.pot
+    sed -i 's/charset=CHARSET/charset=UTF-8/g' $p.pot
     cd -
     done
-
-  # Push potfiles to zanata
-  $ zanata-cli push --push-type source
-
-How to pull new translations from zanata
-  $ git clone git@github.com:fedora-selinux/selinux.git
-  $ cd selinux
-  # Make sure "zanata.xml" file pointing to corresponding translations branch is present
-  # Optionally update source files on zanata
-  # Pull new translations from zanata
-  $ zanata-cli -e pull --pull-type trans
-
-How to update translations *-po.tgz files
-  $ mkdir zanata
-  $ cd zanata
-  $ zanata-cli -e pull --project-config ../zanata.xml  --pull-type both
+  # https://translate.fedoraproject.org/projects/selinux/policycoreutils/en/
+  # Files -> Upload translations
+  # Repeat the process for python, gui and sandbox
+  # or use weblate command line tool (get your API key at https://translate.fedoraproject.org/accounts/profile/#api):
   $ for p in policycoreutils python gui sandbox; do
-    cd $p
-    tar -c -f ../../$p-po.tgz -z .
-    cd -
+    wlc --key <API key> --url https://translate.fedoraproject.org/api/ upload --input $p/po/$p.pot selinux/$p/en --method=source
     done
+
+How to pull new translations from weblate
+  $ git clone git@github.com:fedora-selinux/selinux.git
+  # https://translate.fedoraproject.org/projects/selinux/policycoreutils
+  # Files -> Download translation files as ZIP file (save in selinux source directory)
+  # Repeat the process for python, gui and sandbox
+  # or use weblate command line tool
+  $ for p in policycoreutils python gui sandbox; do
+    wlc --key <API key> --url https://translate.fedoraproject.org/api/ download selinux/$p --output selinux
+    done
+  # unzip archives
+  $ cd selinux
+  $ for p in policycoreutils python gui sandbox; do
+    unzip -o selinux-$p.zip -d ..
+    rm selinux-$p.zip
+    done
+  $ git add .
+  $ git commit

make-rhat-patches.sh

@@ -1,40 +0,0 @@
-#!/bin/bash
-
-POLICYCOREUTILS_VERSION=2.4
-SEPOLGEN_VERSION=1.2.2
-BRANCH=master
-
-REBASEDIR=`mktemp -d rebase.XXXXXX`
-pushd $REBASEDIR
-
-git clone git@github.com:fedora-selinux/selinux.git
-pushd selinux; git checkout $BRANCH; COMMIT=`git rev-parse --verify HEAD`; popd
-
-# prepare policycoreutils-rhat.patch
-tar xfz ../policycoreutils-$POLICYCOREUTILS_VERSION.tar.gz
-pushd policycoreutils-$POLICYCOREUTILS_VERSION
-
-git init; git add .; git commit -m "init"
-cp -r ../selinux/policycoreutils/* .
-git add -A .
-
-git diff --cached --src-prefix=a/policycoreutils-$POLICYCOREUTILS_VERSION/ --dst-prefix=b/policycoreutils-$POLICYCOREUTILS_VERSION/ > ../../policycoreutils-rhat.patch
-
-popd
-
-#prepare sepolgen-rhat.patch
-tar xfz ../sepolgen-$SEPOLGEN_VERSION.tar.gz
-pushd sepolgen-$SEPOLGEN_VERSION
-
-git init; git add .; git commit -m "init"
-cp -r ../selinux/sepolgen/* .
-git add -A .
-
-git diff --cached --src-prefix=a/sepolgen-$SEPOLGEN_VERSION/ --dst-prefix=b/sepolgen-$SEPOLGEN_VERSION/ > ../../sepolgen-rhat.patch
-
-popd
-
-popd
-# echo rm -rf $REBASEDIR
-
-echo policycoreutils-rhat.patch and sepolgen-rhat.patch created from https://github.com/fedora-selinux/selinux/commit/$COMMIT

plans/selinux.fmf

@@ -0,0 +1,7 @@
+summary: selinux tests - Tier 1 | policycoreutils
+discover:
+    how: fmf
+    url: https://src.fedoraproject.org/tests/selinux
+    filter: "tier: 1 | component: policycoreutils & tags: generic, fedora"
+execute:
+    how: tmt

policycoreutils.spec

@@ -1,7 +1,7 @@
 %global libauditver     3.0
-%global libsepolver     3.4-1
-%global libsemanagever  3.4-1
-%global libselinuxver   3.4-1
+%global libsepolver     3.5-1
+%global libsemanagever  3.5-1
+%global libselinuxver   3.5-1
 
 %global generatorsdir %{_prefix}/lib/systemd/system-generators
 
@@ -10,11 +10,11 @@
 
 Summary: SELinux policy core utilities
 Name:    policycoreutils
-Version: 3.4
-Release: 6%{?dist}
-License: GPLv2
+Version: 3.5
+Release: 1%{?dist}
+License: GPL-2.0-or-later
 # https://github.com/SELinuxProject/selinux/wiki/Releases
-Source0: https://github.com/SELinuxProject/selinux/releases/download/3.4/selinux-3.4.tar.gz
+Source0: https://github.com/SELinuxProject/selinux/releases/download/3.5/selinux-3.5.tar.gz
 URL:     https://github.com/SELinuxProject/selinux
 Source13: system-config-selinux.png
 Source14: sepolicy-icons.tgz
@@ -28,23 +28,14 @@ Source21: python-po.tgz
 Source22: gui-po.tgz
 Source23: sandbox-po.tgz
 # https://github.com/fedora-selinux/selinux
-# $ git format-patch -N 3.4 -- policycoreutils python gui sandbox dbus semodule-utils restorecond
+# $ git format-patch -N 3.5 -- policycoreutils python gui sandbox dbus semodule-utils restorecond
 # $ for j in [0-9]*.patch; do printf "Patch%s: %s\n" ${j/-*/} $j; done
 # Patch list start
 Patch0001: 0001-sandbox-add-reset-to-Xephyr-as-it-works-better-with-.patch
-Patch0002: 0002-Fix-STANDARD_FILE_CONTEXT-section-in-man-pages.patch
-Patch0003: 0003-If-there-is-no-executable-we-don-t-want-to-print-a-p.patch
-Patch0004: 0004-Simplication-of-sepolicy-manpage-web-functionality.-.patch
-Patch0005: 0005-We-want-to-remove-the-trailing-newline-for-etc-syste.patch
-Patch0006: 0006-Fix-title-in-manpage.py-to-not-contain-online.patch
-Patch0007: 0007-Don-t-be-verbose-if-you-are-not-on-a-tty.patch
-Patch0008: 0008-sepolicy-generate-Handle-more-reserved-port-types.patch
-Patch0009: 0009-sandbox-Use-matchbox-window-manager-instead-of-openb.patch
-Patch0010: 0010-Use-SHA-2-instead-of-SHA-1.patch
-Patch0011: 0011-sepolicy-Drop-old-interface-file_type_is_executable-.patch
-Patch0012: 0012-gettext-handle-unsupported-languages-properly.patch
-Patch0013: 0013-semodule-rename-rebuild-if-modules-changed-to-refres.patch
-Patch0014: 0014-python-Split-semanage-import-into-two-transactions.patch
+Patch0002: 0002-Don-t-be-verbose-if-you-are-not-on-a-tty.patch
+Patch0003: 0003-sepolicy-generate-Handle-more-reserved-port-types.patch
+Patch0004: 0004-sandbox-Use-matchbox-window-manager-instead-of-openb.patch
+Patch0005: 0005-Use-SHA-2-instead-of-SHA-1.patch
 # Patch list end
 
 Obsoletes: policycoreutils < 2.0.61-2
@@ -57,7 +48,7 @@ Provides: /sbin/restorecon
 BuildRequires: gcc make
 BuildRequires: pam-devel libsepol-static >= %{libsepolver} libsemanage-devel >= %{libsemanagever} libselinux-devel >= %{libselinuxver}  libcap-devel audit-libs-devel >=  %{libauditver} gettext
 BuildRequires: desktop-file-utils dbus-devel dbus-glib-devel
-BuildRequires: python3-devel
+BuildRequires: python3-devel python3-setuptools python3-pip
 BuildRequires: systemd
 BuildRequires: git-core
 Requires: util-linux grep gawk diffutils rpm sed
@@ -80,7 +71,7 @@ load_policy to load policies, setfiles to label filesystems, newrole
 to switch roles.
 
 %prep -p /usr/bin/bash
-%autosetup -n selinux-%{version} -p 1
+%autosetup -p 1 -n selinux-%{version}
 
 cp %{SOURCE13} gui/
 tar -xvf %{SOURCE14} -C python/sepolicy/
@@ -93,7 +84,7 @@ tar -xvf %{SOURCE14} -C python/sepolicy/
 # tar -x -f %{SOURCE20} -C policycoreutils -z
 # tar -x -f %{SOURCE21} -C python -z
 # tar -x -f %{SOURCE22} -C gui -z
-tar -x -f %{SOURCE23} -C sandbox -z
+# tar -x -f %{SOURCE23} -C sandbox -z
 
 %build
 %set_build_flags
@@ -152,27 +143,6 @@ install -m 644 -p %{SOURCE18} %{buildroot}/%{_unitdir}/
 install -m 755 -p %{SOURCE19} %{buildroot}/%{generatorsdir}/
 install -m 755 -p %{SOURCE15} %{buildroot}/%{_libexecdir}/selinux/
 
-# change /usr/bin/python to %%{__python3} in policycoreutils-python3
-pathfix.py -i "%{__python3} -Es" -p %{buildroot}%{python3_sitelib}
-
-# change /usr/bin/python to %%{__python3} in policycoreutils-python-utils
-pathfix.py -i "%{__python3} -Es" -p \
-    %{buildroot}%{_sbindir}/semanage \
-    %{buildroot}%{_bindir}/chcat \
-    %{buildroot}%{_bindir}/sandbox \
-    %{buildroot}%{_datadir}/sandbox/start \
-    %{buildroot}%{_bindir}/audit2allow \
-    %{buildroot}%{_bindir}/sepolicy \
-    %{buildroot}%{_bindir}/sepolgen-ifgen \
-    %{buildroot}%{_datadir}/system-config-selinux/system-config-selinux.py \
-    %{buildroot}%{_datadir}/system-config-selinux/selinux_server.py \
-    %nil
-
-# clean up ~ files from pathfix - https://bugzilla.redhat.com/show_bug.cgi?id=1546990
-find %{buildroot}%{python3_sitelib} %{buildroot}%{python3_sitearch} \
-     %{buildroot}%{_sbindir} %{buildroot}%{_bindir} %{buildroot}%{_datadir} \
-     -type f -name '*~' | xargs rm -f
-
 # Manually invoke the python byte compile macro for each path that needs byte
 # compilation.
 %py_byte_compile %{__python3} %{buildroot}%{_datadir}/system-config-selinux
@@ -241,6 +211,7 @@ Requires:python3-libsemanage >= %{libsemanagever} python3-libselinux
 Requires:audit-libs-python3 >=  %{libauditver}
 Requires: checkpolicy
 Requires: python3-setools >= 4.4.0
+Requires: python3-distro
 BuildArch: noarch
 
 %description -n python3-policycoreutils
@@ -432,7 +403,7 @@ system-config-selinux is a utility for managing the SELinux environment
 %dir %{_datadir}/bash-completion
 %{_datadir}/bash-completion/completions/setsebool
 %{!?_licensedir:%global license %%doc}
-%license policycoreutils/COPYING
+%license policycoreutils/LICENSE
 %doc %{_usr}/share/doc/%{name}
 
 %package restorecond
@@ -454,7 +425,7 @@ The policycoreutils-restorecond package contains the restorecond service.
 %{_mandir}/ru/man8/restorecond.8*
 
 %{!?_licensedir:%global license %%doc}
-%license policycoreutils/COPYING
+%license policycoreutils/LICENSE
 
 %post
 %systemd_post selinux-autorelabel-mark.service
@@ -472,6 +443,33 @@ The policycoreutils-restorecond package contains the restorecond service.
 %systemd_postun_with_restart restorecond.service
 
 %changelog
+* Fri Feb 24 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-1
+- SELinux userspace 3.5 release
+
+* Mon Feb 13 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc3.1
+- SELinux userspace 3.5-rc3 release
+
+* Wed Feb  8 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc2.3
+- Attach tty to selinux-autorelabel.service when AUTORELABEL=0
+
+* Thu Jan 26 2023 Vit Mojzis <vmojzis@redhat.com> - 3.5-0.rc2.2
+- python/sepolicy: Cache conditional rule queries
+
+* Fri Jan 20 2023 Fedora Release Engineering <releng@fedoraproject.org> - 3.5-0.rc2.1.1
+- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
+
+* Mon Jan 16 2023 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc2.1
+- SELinux userspace 3.5-rc2 release
+
+* Fri Dec 23 2022 Petr Lautrbach <lautrbach@redhat.com> - 3.5-0.rc1.1
+- SELinux userspace 3.5-rc1 release
+
+* Mon Nov 21 2022 Petr Lautrbach <lautrbach@redhat.com> - 3.4-7.1
+- Rebase on upstream f56a72ac9e86
+- sepolicy: fix sepolicy manpage -w
+- sandbox: add -R option to alternate XDG_RUNTIME_DIR
+- Remove dependency on the Python module distutils
+
 * Tue Aug  2 2022 Petr Lautrbach <plautrba@redhat.com> - 3.4-6
 - Run autorelabel in parallel by default
   https://fedoraproject.org/wiki/Changes/SELinux_Parallel_Autorelabel

selinux-autorelabel-generator.sh

@@ -18,6 +18,15 @@ fi
 set_target ()
 {
     ln -sf "$unitdir/selinux-autorelabel.target" "$earlydir/default.target"
+    AUTORELABEL="1"
+    source /etc/selinux/config
+    if [ "$AUTORELABEL" = "0" ]; then
+        mkdir -p "$earlydir/selinux-autorelabel.service.d"
+        cat > "$earlydir/selinux-autorelabel.service.d/tty.conf" <<EOF
+[Service]
+StandardInput=tty
+EOF
+    fi
 }
 
 if selinuxenabled; then

sources

@@ -2,4 +2,4 @@ SHA512 (gui-po.tgz) = 8e0855256b825eea422b8e2b82cc0decf66b902c9930840905c5ad5dda
 SHA512 (policycoreutils-po.tgz) = 66b908f7a167225bebded46f9cf92f42eb194daa2a083d48de43c2a5d33fa42724c5add0a9d029ac9d62c500f6f1c8d3bc138dd598b1fd97e609d7cc7160be72
 SHA512 (python-po.tgz) = 7f2a082b77c7b4417d5d3dac35d86dd635635a9c05a80e5f9284d03604e2f2a06ec879fb29b056d1a46d3fc448cd76e6fd25196834c18a161fd6677f2e11b2be
 SHA512 (sandbox-po.tgz) = 3d4b389b56bab1a6dddce9884dcebdefbefd1017fec6d987ac22a0705f409ed56722387aaca8fe7d9c468862136387bc703062e2b6de8fd102e13fed04ce811b
-SHA512 (selinux-3.4.tar.gz) = 9b619f6b2c632cc5cfebf5e9a9c1aa4130ef1efe9b85954d5a9da4f7a9bc15e82b9efcb4aa9c7ba2e16bac79cf116163a5d4d9cb7cbba3c96c88e01509bd60ab
+SHA512 (selinux-3.5.tar.gz) = a91b978d7a5f8adc6c4a4fb47ac92e49e73528905b8fe061ecff77d6ad6b316c4f8391e85dfcc7b422ed83076b9b84f592f567e76d862c569ab3a1079100a1fc

tests/CIL-modules-without-compilation/Makefile

@@ -1,64 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Sanity/CIL-modules-without-compilation
-#   Description: What the test does
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2016 Red Hat, Inc.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Sanity/CIL-modules-without-compilation
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	test -x runtest.sh || chmod a+x runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     What the test does" >> $(METADATA)
-	@echo "Type:            Sanity" >> $(METADATA)
-	@echo "TestTime:        5m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4 -RHEL6 -RHELClient5 -RHELServer5" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/CIL-modules-without-compilation/PURPOSE

@@ -1,5 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Sanity/CIL-modules-without-compilation
-Author: Milos Malik <mmalik@redhat.com>
-
-Is it possible to manage policy modules written in CIL without any compilation? Does semanage and semodule understand them?
-

tests/CIL-modules-without-compilation/runtest.sh

@@ -1,73 +0,0 @@
-#!/bin/bash
-# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Sanity/CIL-modules-without-compilation
-#   Description: What the test does
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2016 Red Hat, Inc.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include Beaker environment
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm $PACKAGE
-        rlRun "echo '()' > empty.cil"
-        rlRun "echo '(())' > invalid.cil"
-    rlPhaseEnd
-
-    rlPhaseStartTest "empty CIL module"
-        rlRun "semodule -lfull | grep '400.*empty.*cil'" 1
-        rlRun "semodule -i empty.cil"
-        rlRun "semodule -lfull | grep '400.*empty.*cil'"
-        rlRun "semodule -r empty"
-        rlRun "semodule -lfull | grep '400.*empty.*cil'" 1
-        rlRun "semanage module -l | grep 'empty.*400.*cil'" 1
-        rlRun "semanage module -a empty.cil"
-        rlRun "semanage module -l | grep 'empty.*400.*cil'"
-        rlRun "semanage module -r empty"
-        rlRun "semanage module -l | grep 'empty.*400.*cil'" 1
-    rlPhaseEnd
-
-    rlPhaseStartTest "invalid CIL module"
-        rlRun "semodule -lfull | grep '400.*invalid.*cil'" 1
-        rlRun "semodule -i invalid.cil" 1
-        rlRun "semodule -lfull | grep '400.*invalid.*cil'" 1
-        rlRun "semodule -r invalid" 1
-        rlRun "semodule -lfull | grep '400.*invalid.*cil'" 1
-        rlRun "semanage module -l | grep 'invalid.*400.*cil'" 1
-        rlRun "semanage module -a invalid.cil" 1
-        rlRun "semanage module -l | grep 'invalid.*400.*cil'" 1
-        rlRun "semanage module -r invalid" 1
-        rlRun "semanage module -l | grep 'invalid.*400.*cil'" 1
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-        rlRun "rm -f empty.cil invalid.cil"
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/linux-system-roles.selinux-tests/Makefile

@@ -1,63 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of selinux-ansible-playbook
-#   Description: Run linux-system-roles.selinux (https://github.com/linux-system-roles/selinux.git) Ansible role tests
-#   Author: Petr Lautrbach <plautrba@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2018 Red Hat, Inc.
-#
-#   This program is free software: you can redistribute it and/or
-#   modify it under the terms of the GNU General Public License as
-#   published by the Free Software Foundation, either version 2 of
-#   the License, or (at your option) any later version.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE.  See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public License
-#   along with this program. If not, see http://www.gnu.org/licenses/.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=linux-system-roles.selinux-tests
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	test -x runtest.sh || chmod a+x runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Petr Lautrbach <plautrba@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     Run linux-system-roles.selinux (https://github.com/linux-system-roles/selinux.git) Ansible role tests" >> $(METADATA)
-	@echo "Type:            Sanity" >> $(METADATA)
-	@echo "TestTime:        10m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils ansible git" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2+" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4 -RHELClient5 -RHELServer5" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/linux-system-roles.selinux-tests/PURPOSE

@@ -1,4 +0,0 @@
-PURPOSE of selinux-ansible-playbook
-Author: Petr Lautrbach <plautrba@redhat.com>
-
-Run linux-system-roles.selinux (https://github.com/linux-system-roles/selinux.git) Ansible role tests

tests/linux-system-roles.selinux-tests/runtest.sh

@@ -1,57 +0,0 @@
-#!/bin/bash
-# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Description: Run linux-system-roles.selinux (https://github.com/linux-system-roles/selinux.git) Ansible role tests
-#   Author: Petr Lautrbach <plautrba@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2018 Red Hat, Inc.
-#
-#   This program is free software: you can redistribute it and/or
-#   modify it under the terms of the GNU General Public License as
-#   published by the Free Software Foundation, either version 2 of
-#   the License, or (at your option) any later version.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE.  See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public License
-#   along with this program. If not, see http://www.gnu.org/licenses/.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include Beaker environment
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm $PACKAGE
-        rlAssertRpm "git"
-        rlAssertRpm "ansible"
-
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "git clone https://github.com/linux-system-roles/selinux.git"
-	rlRun "cd selinux/test"
-
-	for ansible_test in test_*.yml; do
-            rlRun "ansible-playbook -i localhost, -c local -v $ansible_test"
-	done
-
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-	rlRun "cd ../../"
-        rlRun "rm -rf selinux"
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/load_policy/Makefile

@@ -1,64 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Sanity/load_policy
-#   Description: Does load_policy work as expected? Does it produce correct audit messages?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2016 Red Hat, Inc.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Sanity/load_policy
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	test -x runtest.sh || chmod a+x runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     Does load_policy work as expected? Does it produce correct audit messages?" >> $(METADATA)
-	@echo "Type:            Sanity" >> $(METADATA)
-	@echo "TestTime:        5m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        audit policycoreutils selinux-policy-targeted" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4 -RHELClient5 -RHELServer5" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/load_policy/PURPOSE

@@ -1,5 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Sanity/load_policy
-Author: Milos Malik <mmalik@redhat.com>
-
-Does load_policy work as expected? Does it produce correct audit messages?
-

tests/load_policy/runtest.sh

@@ -1,79 +0,0 @@
-#!/bin/bash
-# vim: dict+=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Sanity/load_policy
-#   Description: Does load_policy work as expected? Does it produce correct audit messages?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2016 Red Hat, Inc.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include Beaker environment
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-if rlIsRHEL 6 ; then
-    SELINUX_FS_MOUNT="/selinux"
-else # RHEL-7 and above
-    SELINUX_FS_MOUNT="/sys/fs/selinux"
-fi
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-        rlRun "ls -l `which load_policy`"
-        BINARY_POLICY=`find /etc/selinux/targeted -type f -name policy.?? | sort -n | tail -n 1`
-        rlRun "ls -l ${BINARY_POLICY}"
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "load_policy --xyz 2>&1 | grep \"invalid option\""
-        rlRun "dmesg | grep -i selinux" 0,1
-        rlRun "grep -i selinux /proc/mounts"
-        START_DATE_TIME=`date "+%m/%d/%Y %T"`
-        sleep 1
-        rlRun "load_policy -q"
-        rlRun "grep -i selinux /proc/mounts"
-        sleep 1
-        if rlIsRHEL ; then
-            rlRun "ausearch -m MAC_POLICY_LOAD -i -ts ${START_DATE_TIME} | grep load_policy"
-        fi
-        rlRun "ausearch -m MAC_POLICY_LOAD -i -ts ${START_DATE_TIME} | grep 'policy loaded'"
-        rlRun "umount ${SELINUX_FS_MOUNT}"
-        rlRun "grep -i selinux /proc/mounts" 1
-        START_DATE_TIME=`date "+%m/%d/%Y %T"`
-        sleep 1
-        rlRun "load_policy -i ${BINARY_POLICY}"
-        rlRun "grep -i selinux /proc/mounts"
-        sleep 1
-        if rlIsRHEL ; then
-            rlRun "ausearch -m MAC_POLICY_LOAD -i -ts ${START_DATE_TIME} | grep load_policy"
-        fi
-        rlRun "ausearch -m MAC_POLICY_LOAD -i -ts ${START_DATE_TIME} | grep 'policy loaded'"
-        rlRun "dmesg | grep -i selinux"
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/restorecon/Makefile

@@ -1,70 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Sanity/restorecon
-#   Description: does restorecon work correctly ?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Sanity/restorecon
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE testpolicy.te testpolicy.fc
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	chmod a+x runtest.sh
-	chcon -t bin_t runtest.sh;:
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     does restorecon work correctly ?" >> $(METADATA)
-	@echo "Type:            Sanity" >> $(METADATA)
-	@echo "TestTime:        15m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils" >> $(METADATA)
-	@echo "Requires:        grep" >> $(METADATA)
-	@echo "Requires:        e2fsprogs" >> $(METADATA)
-	@echo "Requires:        libselinux" >> $(METADATA)
-	@echo "Requires:        selinux-policy-devel" >> $(METADATA)
-	@echo "Requires:        libselinux-utils" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/restorecon/PURPOSE

@@ -1,5 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Sanity/restorecon
-Author: Milos Malik <mmalik@redhat.com>
-
-Does restorecon work correctly?
-

tests/restorecon/runtest.sh

@@ -1,367 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Sanity/restorecon
-#   Description: does restorecon work correctly ?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include rhts environment
-. /usr/bin/rhts-environment.sh
-. /usr/share/beakerlib/beakerlib.sh
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-        rlServiceStop mcstrans mcstransd
-        rlRun "rpm -qf `which restorecon` | grep ${PACKAGE}"
-        rlRun "setenforce 1"
-        rlRun "sestatus"
-        rlRun "setsebool allow_domain_fd_use on"
-    rlPhaseEnd
-
-    rlPhaseStartTest "Functional test"
-
-        TESTDIR="/opt/restorecon_testdir"
-        DIRS="correct.dir incorrect1.dir incorrect2.dir customizable.dir"
-        FILES="correct.file incorrect.file customizable.file"
-
-        rlRun "make -f /usr/share/selinux/devel/Makefile"
-        rlRun "semodule -i testpolicy.pp"
-
-        rlFileBackup /etc/selinux/targeted/contexts/customizable_types
-        rlRun "echo 'customizable_t' >> /etc/selinux/targeted/contexts/customizable_types"
-
-        # Here is the testing dirs and files structure
-        # all the files have initial context corresponding to their names
-
-        # ./
-        # correct.file
-        # incorrect.file
-        # customizable.file
-
-        # correct.dir/
-        #     correct.file
-        #     incorrect.file
-        #     customizable.file
-
-        # incorrect1.dir/
-        #     correct.file
-        #     incorrect.file
-        #     customizable.file
-
-        # incorrect2.dir/
-        #     correct.file
-        #     incorrect.file
-        #     customizable.file
-
-        # customizable.dir/
-        #     correct.file
-        #     incorrect.file
-        #     customizable.file
-
-        # Function to set initial contexts
-        function set_contexts {
-            # Set the intended contexts
-            rlLog "Setting initial contexts of testing dirs..."
-            restorecon -R $TESTDIR
-            for ITEM in `find . -name 'incorrect*'`; do
-                chcon -t incorrect_t $ITEM
-            done
-            for ITEM in `find . -name 'customizable*'`; do
-                chcon -t customizable_t $ITEM
-            done
-        }
-
-        # Check that files in dir $1 have the initial contexts
-        function check_initial_contexts {
-            if echo $1 | grep -q 'incorrect.dir'; then 
-                rlRun "ls -ladZ $1 | grep :incorrect_t"
-            elif echo $1 | grep -q 'correct.dir'; then
-                rlRun "ls -ladZ $1 | grep :correct_t"
-            elif echo $1 | grep -q 'customizable.dir'; then
-                rlRun "ls -ladZ $1 | grep :customizable_t"
-            fi
-            rlRun "ls -ladZ $1/* | grep '\<correct.file' | grep ':correct_t'"
-            rlRun "ls -ladZ $1/* | grep '\<incorrect.file' | grep ':incorrect_t'"
-            rlRun "ls -ladZ $1/* | grep '\<customizable.file' | grep ':customizable_t'"
-        }
-
-        # Check that files matching with $2 in dir $1 have context $3
-        function check_contexts {
-            COMMAND="find $1 -name '$2'"
-            for ITEM in `eval $COMMAND`; do
-                rlRun "ls -ladZ $ITEM | grep :$3";
-            done
-        }
-
-        # Create the testing dirs and files
-        rlRun "mkdir -p $TESTDIR"
-        rlRun "pushd $TESTDIR"
-        rlRun "mkdir $DIRS"
-        rlRun "touch $FILES"
-        for DIR in $DIRS; do
-            rlRun "pushd $DIR"
-            rlRun "touch $FILES"
-            rlRun "popd"
-        done
-
-        set_contexts
-
-        echo
-        rlLog "Checking initial contexts of testing dirs..."
-        # Check the contexts are set properly
-        check_initial_contexts '.'
-        check_initial_contexts 'incorrect1.dir'
-        check_initial_contexts 'incorrect2.dir'
-        check_initial_contexts 'correct.dir'
-        check_initial_contexts 'customizable.dir'
-        check_contexts '.' 'incorrect*' 'incorrect_t'
-        check_contexts '.' 'correct*' 'correct_t'
-        check_contexts '.' 'customizable*' 'customizable_t'
-
-        # -e directory
-        #     exclude a directory (repeat the option to exclude more than one directory).
-
-        echo
-        rlLog "-e directory"
-        set_contexts
-        rlRun "restorecon -RF -e $TESTDIR/incorrect2.dir $TESTDIR"
-        for ITEM in `ls *.file`; do rlRun "ls -ladZ $ITEM | grep correct_t"; done
-        check_contexts 'incorrect1.dir' '*' 'correct_t'
-        check_contexts 'customizable.dir' '*' 'correct_t'
-        check_initial_contexts 'incorrect2.dir'
-        rlRun "ls -ladZ incorrect2.dir | grep incorrect_t"
-
-        # -f infilename
-        #     infilename contains a list of files to be processed. Use - for stdin.
-
-        echo
-        rlLog "-f filename"
-        set_contexts
-        rlRun "cat > ../file_list <<EOF
-./customizable.file
-./customizable.dir
-./correct.dir/customizable.file
-./incorrect1.dir/customizable.file
-./incorrect2.dir/customizable.file
-./customizable.dir/customizable.file
-EOF"
-        if rlIsRHEL 5; then chcon -t file_t ../file_list ;fi
-        rlRun "restorecon -F -f ../file_list"
-        check_contexts '.' 'incorrect*' 'incorrect_t'
-        check_contexts '.' 'correct*' 'correct_t'
-        check_contexts '.' 'customizable*' 'correct_t'
-        rlRun "rm -f ../file_list"
-
-
-        echo
-        rlLog "-f -       Input from stdin"
-        set_contexts
-        rlRun "echo -e 'incorrect2.dir\ncustomizable.file\nincorrect.file' | restorecon -f -"
-        check_initial_contexts 'incorrect1.dir'
-        check_initial_contexts 'correct.dir'
-        check_initial_contexts 'customizable.dir'
-        check_contexts 'incorrect2' '*' 'correct_t'
-        rlRun "ls -ladZ customizable.file | grep customizable_t"
-        rlRun "ls -ladZ incorrect.file | grep :correct_t"
-
-        # -F  Force reset of context to match file_context for customizable files, and
-        #     the default file context, changing the user, role, range portion as well
-        #     as the type.
-
-        echo
-        rlLog "-F     Force reset of customizable types"
-        set_contexts
-        rlRun "restorecon -RF $TESTDIR"
-        check_contexts '.' '*' 'correct_t'
-
-    # This feature is from RHEL6 further
-    if ! rlIsRHEL; then
-        echo
-        rlLog "-F     Force reset of the whole context"
-        set_contexts
-        chcon -u staff_u *.file
-        rlRun "ls -laZ correct.file | grep staff_u"
-        rlRun "ls -laZ incorrect.file | grep staff_u"
-        rlRun "ls -laZ customizable.file | grep staff_u"
-        rlRun "restorecon -R $TESTDIR"
-        rlRun "ls -laZ correct.file | grep staff_u"
-        rlRun "ls -laZ incorrect.file | grep staff_u"
-        rlRun "ls -laZ customizable.file | grep staff_u"
-        rlRun "restorecon -RF $TESTDIR"
-        rlRun "ls -laZ correct.file | grep system_u"
-        rlRun "ls -laZ incorrect.file | grep system_u"
-        rlRun "ls -laZ customizable.file | grep system_u"
-    fi
- 
-        # -i  ignore files that do not exist.
-
-        rlRun "restorecon non-existent-file" 1-255
-        rlRun "restorecon -i non-existent-file"
-
-        # -n  don't change any file labels (passive check).
-
-        echo
-        rlLog "-n      dry-run"
-        set_contexts
-        rlRun "restorecon -RF -n $TESTDIR"
-        check_contexts '.' 'incorrect*' 'incorrect_t'
-        check_contexts '.' 'correct*' 'correct_t'
-        check_contexts '.' 'customizable*' 'customizable_t'
-
-        # -o outfilename
-        #     Deprecated,  SELinux  policy will probably block this access.  Use shell
-        #     redirection to save list of files with incorrect context in filename.
-
-        #  ----not tested yet 
-
-        # -R, -r change  files  and directories file labels recursively (descend directo‐
-        #     ries).
-        #     Note: restorecon reports warnings on paths without default  labels  only
-        #     if called non-recursively or in verbose mode.
-
-        set_contexts
-        rlRun "restorecon -R $TESTDIR"
-        check_contexts '.' '*corr*' 'correct_t'
-        check_contexts '.' 'customizable*' 'customizable_t'
-
-        #     ...by default it does not operate recursively on directories
-
-        set_contexts
-        rlRun "restorecon $TESTDIR"
-        check_initial_contexts 'incorrect1.dir'
-        check_initial_contexts 'incorrect2.dir'
-        check_initial_contexts 'correct.dir'
-        check_initial_contexts 'customizable.dir'
-        rlRun "ls -ladZ customizable.file | grep customizable_t"
-        rlRun "ls -ladZ incorrect.file | grep :incorrect_t"
-        rlRun "ls -ladZ correct.file | grep :correct_t"
-
-        # -v show changes in file labels, if type or role are going to be changed.
-
-        #  ----not tested yet 
-
-    # -0 option is not present in RHEL5
-    if ! rlIsRHEL 5; then
-        # -0 the  separator  for  the input items is assumed to be the null character
-        #     (instead of the white space).  The quotes and the  backslash  characters
-        #     are  also  treated as normal characters that can form valid input.  This
-        #     option finally also disables the end of file string,  which  is  treated
-        #     like  any  other  argument.  Useful when input items might contain white
-        #     space, quote marks or backslashes.  The -print0 option of GNU find  pro‐
-        #     duces input suitable for this mode.
-
-        echo
-        rlLog "-0"
-        set_contexts
-        rlRun "find . -print0 | restorecon -f - -0"
-        check_contexts '.' '*corr*' 'correct_t'
-        check_contexts '.' 'customizable*' 'customizable_t'
-
-        echo
-        rlLog "-0   with  -F"
-        set_contexts
-        rlRun "find . -print0 | restorecon -F -f - -0"
-        check_contexts '.' '*' 'correct_t'
-
-    fi
-
-        # If a file object does not have a context, restorecon will write the default
-        # context to the file object's extended attributes.
-
-        #  ----not tested yet 
-
-
-        # Cleanup
-
-        rlRun "popd"
-        rlRun "rm -rf /opt/restorecon_testdir"
-        rlFileRestore
-        rlRun "semodule -r testpolicy"
-    rlPhaseEnd
-
-    # This is RFE from RHEL6 and further versions
-    if ! rlIsRHEL 5;then
-    rlPhaseStartTest
-        # META-Fixed-In: policycoreutils-2.0.83-19.14.el6
-        rlRun "pushd /root"
-        rlRun "touch test-file"
-        rlRun "mkdir test-dir"
-        for ITEM in "test-file" "test-dir" ; do
-            rlRun "chcon -u staff_u -t shadow_t -l s0:c1 ${ITEM}"
-            rlRun "ls -dZ ${ITEM} | grep staff_u:object_r:shadow_t:s0:c1"
-            rlRun "restorecon -v ${ITEM}" 0,1
-            rlRun "ls -dZ ${ITEM} | grep staff_u:object_r:admin_home_t:s0:c1"
-            rlRun "restorecon -F -v ${ITEM}" 0,1
-            rlRun "ls -dZ ${ITEM} | grep system_u:object_r:admin_home_t:s0"
-        done
-        rlRun "rm -rf test-dir"
-        rlRun "rm -f test-file"
-        rlRun "popd"
-    rlPhaseEnd
-    fi
-
-    rlPhaseStartTest
-        # META-Fixed-In: policycoreutils-2.0.83-19.16.el6
-        rlRun "pushd /root"
-        rlRun "touch test-file"
-        rlRun "mkdir test-dir"
-        for ITEM in "test-file" "test-dir" ; do
-            rlRun "chcon -t tmp_t ${ITEM}"
-            rlRun "ls -dZ ${ITEM}"
-            rlRun "chattr +i ${ITEM}"
-            rlRun "restorecon -v ${ITEM}" 1-255
-            rlRun "chattr -i ${ITEM}"
-            rlRun "ls -dZ ${ITEM}"
-            rlRun "restorecon -v ${ITEM}"
-            rlRun "ls -dZ ${ITEM}"
-        done
-        rlRun "rm -rf test-dir"
-        rlRun "rm -f test-file"
-        rlRun "popd"
-    rlPhaseEnd
-
-    # The bug was closed as NEXTRELEASE for RHEL5
-    if ! rlIsRHEL 5; then
-    rlPhaseStartTest
-        rlRun "touch ~/test-file"
-        rlRun "restorecon -vF ~/test-file"
-        rlRun "restorecon -vF ~/test-file | grep \"reset.*context\"" 1
-        rlRun "rm -f ~/test-file"
-
-        rlRun "mkdir ~/test-dir"
-        rlRun "restorecon -vF ~/test-dir"
-        rlRun "restorecon -vF ~/test-dir | grep \"reset.*context\"" 1
-        rlRun "rm -rf ~/test-dir"
-    rlPhaseEnd
-    fi
-
-    rlPhaseStartCleanup
-        rlServiceRestore mcstrans mcstransd
-    rlPhaseEnd
-    rlJournalPrintText
-rlJournalEnd
-

tests/restorecon/testpolicy.fc

@@ -1,2 +0,0 @@
-/opt/restorecon_testdir(/.*)?	system_u:object_r:correct_t:s0
-

tests/restorecon/testpolicy.te

@@ -1,19 +0,0 @@
-policy_module(testpolicy, 1.0)
-
-require {
-    attribute domain;
-    type fs_t;
-}
-
-type correct_t;
-files_type(correct_t)
-type incorrect_t;
-files_type(incorrect_t)
-type customizable_t;
-files_type(customizable_t)
-
-
-#allow domain correct_t:dir relabelto;
-#allow correct_t fs_t:filesystem associate;
-
-

tests/semanage-interface/Makefile

@@ -1,65 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Regression/semanage-interface
-#   Description: Does semanage interface ... work correctly?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Regression/semanage-interface
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	test -x runtest.sh || chmod a+x runtest.sh
-	test -x runtest.sh || chcon -t bin_t runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     Does semanage interface ... work correctly?" >> $(METADATA)
-	@echo "Type:            Regression" >> $(METADATA)
-	@echo "TestTime:        20m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils policycoreutils-python-utils grep selinux-policy-minimum selinux-policy-mls selinux-policy-targeted" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/semanage-interface/PURPOSE

@@ -1,4 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Regression/semanage-interface
-Description: Does semanage interface ... work correctly?
-Author: Milos Malik <mmalik@redhat.com>
-

tests/semanage-interface/runtest.sh

@@ -1,69 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Regression/semanage-interface
-#   Description: Does semanage interface ... work correctly?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include Beaker environment
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "semanage interface --help" 0,1
-        for POLICY_TYPE in minimum mls targeted ; do
-            if [ ! -d /etc/selinux/${POLICY_TYPE} ] ; then
-                continue
-            fi
-            rlRun "semanage interface -l -S ${POLICY_TYPE}"
-        done
-        if ! rlIsRHEL 5; then
-          rlRun "semanage interface -l -S unknown 2>&1 | grep \"store cannot be accessed\""
-        fi
-        rlRun "semanage interface -a -t xyz_t xyz 2>&1 | grep -i -e 'not defined' -e 'error' -e 'could not'"
-        rlRun "semanage interface -m xyz" 1,2
-        rlRun "semanage interface -d xyz" 1
-        rlRun "semanage interface -a -t netif_t xyz"
-        if rlIsRHEL 5 6; then
-            rlRun "semanage interface -m -r s0 xyz"
-        else
-            rlRun "semanage interface -m -t netif_t -r s0 xyz"
-        fi
-        rlRun "semanage interface -l | grep \"xyz.*:netif_t:s0\""
-        rlRun "semanage interface -d xyz"
-        rlRun "semanage interface -l | grep xyz" 1
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/semanage-login/Makefile

@@ -1,65 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Regression/semanage-login
-#   Description: Does semanage login ... work correctly?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Regression/semanage-login
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	test -x runtest.sh || chmod a+x runtest.sh
-	test -x runtest.sh || chcon -t bin_t runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     Does semanage login ... work correctly?" >> $(METADATA)
-	@echo "Type:            Regression" >> $(METADATA)
-	@echo "TestTime:        10m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils policycoreutils-python-utils grep shadow-utils selinux-policy-minimum selinux-policy-mls selinux-policy-targeted" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/semanage-login/PURPOSE

@@ -1,4 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Regression/semanage-login
-Description: Does semanage login ... work correctly?
-Author: Milos Malik <mmalik@redhat.com>
-

tests/semanage-login/runtest.sh

@@ -1,67 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Regression/semanage-login
-#   Description: Does semanage login ... work correctly?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include Beaker environment
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "semanage login --help" 0,1
-        for POLICY_TYPE in minimum mls targeted ; do
-            if [ ! -d /etc/selinux/${POLICY_TYPE} ] ; then
-                continue
-            fi
-            rlRun "semanage login -l -S ${POLICY_TYPE}"
-        done
-        if ! rlIsRHEL 5; then
-          rlRun "semanage login -l -S unknown 2>&1 | grep \"store cannot be accessed\""
-        fi
-        rlRun "semanage login -a -s xyz_u xyz 2>&1 | grep -i -e 'does not exist' -e 'mapping.*invalid' -e 'could not query'"
-        rlRun "semanage login -m xyz" 1
-        rlRun "semanage login -d xyz" 1
-        rlRun "useradd xyz"
-        rlRun "semanage login -a -s user_u xyz"
-        rlRun "semanage login -m -r s0 xyz"
-        rlRun "semanage login -l | grep \"xyz.*user_u.*s0\""
-        rlRun "semanage login -d xyz"
-        rlRun "semanage login -l | grep xyz" 1
-        rlRun "userdel -rf xyz"
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/semanage-permissive-d-problems/Makefile

@@ -1,70 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Regression/semanage-permissive-d-problems
-#   Description: semanage permissive -d accepts more than domain types, its behavior is not reliable
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Regression/semanage-permissive-d-problems
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	chmod a+x runtest.sh
-	chcon -t bin_t runtest.sh; :
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     semanage permissive -d accepts more than domain types, its behavior is not reliable" >> $(METADATA)
-	@echo "Type:            Regression" >> $(METADATA)
-	@echo "TestTime:        20m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils-python-utils" >> $(METADATA)
-	@echo "Requires:        policycoreutils-devel" >> $(METADATA)
-	@echo "Requires:        selinux-policy-devel" >> $(METADATA)
-	@echo "Requires:        grep" >> $(METADATA)
-	@echo "Requires:        coreutils" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Releases:        -RHEL4 -RHELServer5 -RHELClient5" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/semanage-permissive-d-problems/PURPOSE

@@ -1,5 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Regression/semanage-permissive-d-problems
-Author: Milos Malik <mmalik@redhat.com>
-
-Does semanage permissive work correctly?
-

tests/semanage-permissive-d-problems/runtest.sh

@@ -1,93 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Regression/semanage-permissive-d-problems
-#   Description: semanage permissive -d accepts more than domain types, its behavior is not reliable
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include rhts environment
-. /usr/bin/rhts-environment.sh
-. /usr/share/beakerlib/beakerlib.sh
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-        rlRun "rpm -qf /usr/sbin/semanage"
-        OUTPUT_FILE=`mktemp`
-        rlRun "sestatus"
-    rlPhaseEnd
-
-    if selinuxenabled ; then
-        rlPhaseStartTest
-            if rlIsRHEL 7 ; then
-                rlFileBackup /usr/share/selinux/default/Makefile
-                rlRun "rm -rf /usr/share/selinux/default/Makefile"
-            fi
-            rlRun "semanage permissive -l | grep fenced" 1
-            rlRun "semanage permissive -a fenced_t"
-            rlRun "semanage permissive -l | grep fenced"
-            rlRun "semanage permissive -d fenced_t"
-            rlRun "semanage permissive -l | grep fenced" 1
-            if rlIsRHEL 7 ; then
-                rlFileRestore
-            fi
-        rlPhaseEnd
-
-        rlPhaseStartTest
-            rlRun "semanage permissive -l 2>&1 | grep -e ypserv_t -e ypbind_t | tee ${OUTPUT_FILE}"
-            rlRun "wc -l < ${OUTPUT_FILE} | grep ^0$"
-            rlRun "semanage permissive -a ypbind_t"
-            rlRun "semanage permissive -a ypserv_t"
-            rlRun "semanage permissive -l 2>&1 | grep -e ypserv_t -e ypbind_t | tee ${OUTPUT_FILE}"
-            rlRun "wc -l < ${OUTPUT_FILE} | grep ^2$"
-            rlRun "semanage permissive -d yp" 1-255
-            rlRun "semanage permissive -l 2>&1 | grep -e ypserv_t -e ypbind_t | tee ${OUTPUT_FILE}"
-            rlRun "wc -l < ${OUTPUT_FILE} | grep ^2$"
-            rlRun "semanage permissive -d ypbind_t"
-            rlRun "semanage permissive -d ypserv_t"
-            rlRun "semanage permissive -l 2>&1 | grep -e ypserv_t -e ypbind_t | tee ${OUTPUT_FILE}"
-            rlRun "wc -l < ${OUTPUT_FILE} | grep ^0$"
-        rlPhaseEnd
-
-        rlPhaseStartTest
-            rlRun -s "semanage permissive -d" 1
-            rlAssertNotGrep 'traceback' $rlRun_LOG -iEq
-            rlAssertGrep 'error: the following argument is required: type' $rlRun_LOG -iEq
-            rm -f $rlRun_LOG
-        rlPhaseEnd
-    else
-        rlPhaseStartTest
-            rlRun "semanage permissive -l >& ${OUTPUT_FILE}" 0,1
-            rlRun "grep -C 32 -i -e exception -e traceback -e error ${OUTPUT_FILE}" 1
-        rlPhaseEnd
-    fi
-
-    rlPhaseStartCleanup
-        rm -f ${OUTPUT_FILE}
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/semanage-port-add-delete-problems/Makefile

@@ -1,71 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Regression/semanage-port-add-delete-problems
-#   Description: semanage accepts invalid port numbers and then cannot delete them
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2009 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Regression/semanage-port-add-delete-problems
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	chmod a+x runtest.sh
-	chcon -t bin_t runtest.sh;:
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     semanage accepts invalid port numbers and then cannot delete them" >> $(METADATA)
-	@echo "Type:            Regression" >> $(METADATA)
-	@echo "TestTime:        15m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils-python-utils" >> $(METADATA)
-	@echo "Requires:        setools-console" >> $(METADATA)
-	@echo "Requires:        libselinux" >> $(METADATA)
-	@echo "Requires:        libselinux-utils" >> $(METADATA)
-	@echo "Requires:        coreutils" >> $(METADATA)
-	@echo "Requires:        grep" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/semanage-port-add-delete-problems/PURPOSE

@@ -1,5 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Regression/semanage-port-add-delete-problems
-Author: Milos Malik <mmalik@redhat.com>
-
-semanage accepts invalid port numbers and then cannot delete them
-

tests/semanage-port-add-delete-problems/runtest.sh

@@ -1,137 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/rhts-library/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Regression/semanage-port-add-delete-problems
-#   Description: semanage accepts invalid port numbers and then cannot delete them
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2009 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-PORT_NAME="ldap_port_t"
-BAD_PORT_NUMBER="123456"
-GOOD_PORT_NUMBER="1389"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-        rlRun "rpm -qf /usr/sbin/semanage"
-        rlRun "rpm -qf /usr/bin/seinfo"
-        OUTPUT_FILE=`mktemp`
-        rlRun "setenforce 1"
-        rlRun "sestatus"
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "semanage port -l | grep ${PORT_NAME}"
-
-        rlRun "semanage port -l | grep ${PORT_NAME} | tee -a ${OUTPUT_FILE}"
-        rlRun "semanage port -a -t ${PORT_NAME} -p tcp ${BAD_PORT_NUMBER}" 1
-        rlRun "semanage port -l | grep ${PORT_NAME} | tee -a ${OUTPUT_FILE}"
-        rlRun "semanage port -d -t ${PORT_NAME} -p tcp ${BAD_PORT_NUMBER}" 1
-        rlRun "semanage port -l | grep ${PORT_NAME} | tee -a ${OUTPUT_FILE}"
-        #rlRun "sort ${OUTPUT_FILE} | uniq | wc -l | grep '^2$'"
-
-        rlRun "semanage port -l | grep ${PORT_NAME} | grep ${GOOD_PORT_NUMBER}" 1
-        rlRun "semanage port -a -t ${PORT_NAME} -p tcp ${GOOD_PORT_NUMBER}"
-        rlRun "semanage port -l | grep ${PORT_NAME} | grep ${GOOD_PORT_NUMBER}"
-        rlRun "semanage port -d -t ${PORT_NAME} -p tcp ${GOOD_PORT_NUMBER}"
-        rlRun "semanage port -l | grep ${PORT_NAME} | grep ${GOOD_PORT_NUMBER}" 1
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "semanage port -a -t syslogd_port_t -p tcp 60514-60516 2>&1 | grep -i traceback" 1
-        rlRun "semanage port -l | grep syslogd_port_t"
-        rlRun "semanage port -d -t syslogd_port_t -p tcp 60514-60516 2>&1 | grep -i traceback" 1
-    rlPhaseEnd
-
-    if rlIsRHEL ; then
-    rlPhaseStartTest
-        rlRun "ps -efZ | grep -v grep | grep \"auditd_t.*auditd\""
-        if rlIsRHEL 5 6; then
-            PORT_TYPE="syslogd_port_t"
-        else
-            PORT_TYPE="commplex_link_port_t"
-        fi
-
-        # adding a port number to a type
-        START_DATE_TIME=`date "+%m/%d/%Y %T"`
-        sleep 1
-        rlRun "semanage port -a -p tcp -t $PORT_TYPE 5005"
-        sleep 2
-
-        # Check for user_avc
-        rlRun "ausearch -m user_avc -ts ${START_DATE_TIME} > ${OUTPUT_FILE}" 0,1
-        LINE_COUNT=`wc -l < ${OUTPUT_FILE}`
-        rlRun "cat ${OUTPUT_FILE}"
-        rlAssert0 "number of lines in ${OUTPUT_FILE} should be 0" ${LINE_COUNT}
-
-        # deleting a port number from a type
-        START_DATE_TIME=`date "+%m/%d/%Y %T"`
-        sleep 1
-        rlRun "semanage port -d -p tcp -t $PORT_TYPE 5005"
-        sleep 2
-
-        # Check for user_avc
-        rlRun "ausearch -m user_avc -ts ${START_DATE_TIME} > ${OUTPUT_FILE}" 0,1
-        LINE_COUNT=`wc -l < ${OUTPUT_FILE}`
-        rlRun "cat ${OUTPUT_FILE}"
-        rlAssert0 "number of lines in ${OUTPUT_FILE} should be 0" ${LINE_COUNT}
-    rlPhaseEnd
-    fi
-
-    if ! rlIsRHEL 5 ; then
-    rlPhaseStartTest
-        rlRun "seinfo --portcon | grep :hi_reserved_port_t:"
-        rlRun "seinfo --portcon | grep :reserved_port_t:"
-        rlRun "semanage port -l | grep ^hi_reserved_port_t"
-        rlRun "semanage port -l | grep ^reserved_port_t"
-        if ! rlIsRHEL 6 ; then
-            rlRun "seinfo --portcon | grep :unreserved_port_t:"
-            rlRun "semanage port -l | grep ^unreserved_port_t"
-        fi
-    rlPhaseEnd
-    fi
-
-    rlPhaseStartTest "manipulation with hard-wired ports"
-        rlRun "semanage port -l | grep 'smtp_port_t.*tcp.*25'"
-        rlRun "semanage port -a -t smtp_port_t -p tcp 25 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "port .* already defined" ${OUTPUT_FILE} -i
-        rlRun "semanage port -a -t smtp_port_t -p tcp 25 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "port .* already defined" ${OUTPUT_FILE} -i
-        rlRun "semanage port -l | grep 'smtp_port_t.*tcp.*25'"
-        rlRun "semanage port -d -t smtp_port_t -p tcp 25 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "port .* is defined in policy.*cannot be deleted" ${OUTPUT_FILE} -i
-        rlRun "semanage port -d -t smtp_port_t -p tcp 25 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "port .* is defined in policy.*cannot be deleted" ${OUTPUT_FILE} -i
-        rlRun "semanage port -l | grep 'smtp_port_t.*tcp.*25'"
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-        rm -f ${OUTPUT_FILE}
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/semanage-user/Makefile

@@ -1,65 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Regression/semanage-user
-#   Description: Does semanage user ... work correctly?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Regression/semanage-user
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE testpolicy.te
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	test -x runtest.sh || chmod a+x runtest.sh
-	test -x runtest.sh || chcon -t bin_t runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     Does semanage user ... work correctly?" >> $(METADATA)
-	@echo "Type:            Regression" >> $(METADATA)
-	@echo "TestTime:        20m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils policycoreutils-python-utils grep selinux-policy-devel selinux-policy-minimum selinux-policy-mls selinux-policy-targeted selinux-policy-devel" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/semanage-user/PURPOSE

@@ -1,4 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Regression/semanage-user
-Description: Does semanage user ... work correctly?
-Author: Milos Malik <mmalik@redhat.com>
-

tests/semanage-user/runtest.sh

@@ -1,76 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Regression/semanage-user
-#   Description: Does semanage user ... work correctly?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include Beaker environment
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-        rlRun "make -f /usr/share/selinux/devel/Makefile"
-        rlRun "ls -l testpolicy.pp"
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        if rlIsRHEL 5 6; then
-            rlRun "semanage user --help" 1
-        else
-            rlRun "semanage user --help" 0
-            # semanage: list option can not be used with --level ("semanage user -l")
-            rlRun "semanage user --help | grep fcontext" 1
-        fi
-        for POLICY_TYPE in minimum mls targeted ; do
-            if [ ! -d /etc/selinux/${POLICY_TYPE} ] ; then
-                continue
-            fi
-            rlRun "semanage user -l -S ${POLICY_TYPE}"
-        done
-        if ! rlIsRHEL 5; then
-          rlRun "semanage user -l -S unknown 2>&1 | grep \"store cannot be accessed\""
-        fi
-        rlRun "semanage user -a -P user -R xyz_r xyz_u 2>&1 | grep -i -e 'undefined' -e 'error' -e 'could not'"
-        rlRun "semanage user -m xyz_u" 1
-        rlRun "semanage user -d xyz_u" 1
-        rlRun "semodule -i testpolicy.pp"
-        rlRun "semanage user -a -P user -R xyz_r xyz_u"
-        rlRun "semanage user -m -r s0 xyz_u"
-        rlRun "semanage user -l | grep \"xyz_u.*s0.*s0.*xyz_r\""
-        rlRun "semanage user -d xyz_u"
-        rlRun "semanage user -l | grep xyz_u" 1
-        rlRun "semodule -r testpolicy"
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-        rlRun "rm -rf tmp testpolicy.{fc,if,pp}"
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/semanage-user/testpolicy.te

@@ -1,11 +0,0 @@
-module testpolicy 1.0;
-
-type xyz_t;
-role xyz_r;
-
-require {
-  type xyz_t;
-}
-
-role xyz_r types xyz_t;
-

tests/sepolicy-generate/Makefile

@@ -1,64 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Sanity/sepolicy-generate
-#   Description: sepolicy generate sanity test
-#   Author: Michal Trunecka <mtruneck@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Sanity/sepolicy-generate
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	test -x runtest.sh || chmod a+x runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Michal Trunecka <mtruneck@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     sepolicy generate sanity test" >> $(METADATA)
-	@echo "Type:            Sanity" >> $(METADATA)
-	@echo "TestTime:        115m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils policycoreutils-devel rpm-build" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4 -RHEL5 -RHEL6" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/sepolicy-generate/PURPOSE

@@ -1,3 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Sanity/sepolicy-generate
-Description: sepolicy generate sanity test
-Author: Michal Trunecka <mtruneck@redhat.com>

tests/sepolicy-generate/runtest.sh

@@ -1,115 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Sanity/sepolicy-generate
-#   Description: sepolicy generate sanity test
-#   Author: Michal Trunecka <mtruneck@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2013 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include Beaker environment
-. /usr/bin/rhts-environment.sh || exit 1
-. /usr/share/beakerlib/beakerlib.sh || exit 1
-
-PACKAGE="policycoreutils"
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlRun "rlCheckRequirements ${PACKAGES[*]}" || rlDie "cannot continue"
-        rlRun "TmpDir=\$(mktemp -d)" 0 "Creating tmp directory"
-        rlRun "pushd $TmpDir"
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "mkdir mypolicy"
-        rlRun "sepolicy generate --customize -p mypolicy -n testpolicy -d httpd_sys_script_t -w /home"
-        rlRun "grep 'manage_dirs_pattern(httpd_sys_script_t' mypolicy/testpolicy.te"
-        rlRun "rm -rf mypolicy"
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "mkdir mypolicy"
-        rlRun "touch /usr/bin/testpolicy"
-      for VARIANT in " -n testpolicy --admin_user -r webadm_r" \
-                     " --application /usr/bin/testpolicy " \
-                     " -n testpolicy --confined_admin -a firewalld " \
-                     " -n testpolicy --confined_admin " \
-                     " -n testpolicy --customize -d httpd_t -a firewalld " \
-                     " -n testpolicy --customize -d httpd_t" \
-                     " --dbus /usr/bin/testpolicy " \
-                     " -n testpolicy --desktop_user " \
-                     " --inetd /usr/bin/testpolicy " \
-                     " --init /usr/bin/testpolicy " \
-                     " -n testpolicy --newtype -t newtype_var_log_t " \
-                     " -n testpolicy --newtype -t newtype_unit_file_t " \
-                     " -n testpolicy --newtype -t newtype_var_run_t " \
-                     " -n testpolicy --newtype -t newtype_var_cache_t " \
-                     " -n testpolicy --newtype -t newtype_tmp_t " \
-                     " -n testpolicy --newtype -t newtype_port_t " \
-                     " -n testpolicy --newtype -t newtype_var_spool_t " \
-                     " -n testpolicy --newtype -t newtype_var_lib_t " \
-                     " -n testpolicy --sandbox " \
-                     " -n testpolicy --term_user " \
-                     " -n testpolicy --x_user "
-#                     " --cgi /usr/bin/testpolicy "
-        do
-            rlRun "sepolicy generate -p mypolicy $VARIANT"
-            rlRun "cat mypolicy/testpolicy.te"
-            rlRun "cat mypolicy/testpolicy.if"
-            rlRun "cat mypolicy/testpolicy.fc"
-          if echo "$VARIANT" | grep -q newtype; then
-            rlAssertNotExists "mypolicy/testpolicy.sh"
-            rlAssertNotExists "mypolicy/testpolicy.spec"
-          else
-            rlRun "mypolicy/testpolicy.sh"
-            rlRun "semodule -l | grep  testpolicy"
-            rlRun "semanage user -d testpolicy_u" 0-255
-            rlRun "semodule -r testpolicy"
-          fi
-
-            rlRun "rm -rf mypolicy/*"
-            rlRun "sleep 1"
-
-          if ! echo "$VARIANT" | grep -q newtype; then
-            rlRun "sepolicy generate -p mypolicy -w /home  $VARIANT"
-            rlRun "cat mypolicy/testpolicy.te"
-            rlRun "cat mypolicy/testpolicy.if"
-            rlRun "cat mypolicy/testpolicy.fc"
-
-            rlRun "mypolicy/testpolicy.sh"
-            rlRun "semodule -l | grep  testpolicy"
-            rlRun "semanage user -d testpolicy_u" 0-255
-            rlRun "semodule -r testpolicy"
-
-            rlRun "rm -rf mypolicy/*"
-            rlRun "sleep 1"
-          fi
-        done
-        rlRun "rm -rf mypolicy"
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-        rlRun "popd"
-        rlRun "rm -r $TmpDir" 0 "Removing tmp directory"
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd

tests/sestatus/Makefile

@@ -1,67 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Sanity/sestatus
-#   Description: tests everything about sestatus
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Sanity/sestatus
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	chmod a+x runtest.sh
-	chcon -t bin_t runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     tests everything about sestatus" >> $(METADATA)
-	@echo "Type:            Sanity" >> $(METADATA)
-	@echo "TestTime:        5m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        policycoreutils" >> $(METADATA)
-	@echo "Requires:        grep" >> $(METADATA)
-	@echo "Requires:        man" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/sestatus/PURPOSE

@@ -1,4 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Sanity/sestatus
-Description: tests everything about sestatus
-Author: Milos Malik <mmalik@redhat.com>
-

tests/sestatus/runtest.sh

@@ -1,114 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Sanity/sestatus
-#   Description: tests everything about sestatus
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include rhts environment
-. /usr/bin/rhts-environment.sh
-. /usr/share/beakerlib/beakerlib.sh
-
-PACKAGE="policycoreutils"
-if rlIsRHEL 5 6 ; then
-    SELINUX_FS_MOUNT="/selinux"
-else # RHEL-7 and above
-    SELINUX_FS_MOUNT="/sys/fs/selinux"
-fi
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-        rlFileBackup /etc/sestatus.conf
-        rlRun "mount | grep -i selinux" 0,1
-        OUTPUT_FILE=`mktemp`
-    rlPhaseEnd
-
-    rlPhaseStartTest "basic use"
-        rlRun "sestatus"
-        rlRun "sestatus -b 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "policy booleans" ${OUTPUT_FILE} -i
-        rlRun "sestatus -v 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "process contexts" ${OUTPUT_FILE} -i
-        rlAssertGrep "file contexts" ${OUTPUT_FILE} -i
-        rlAssertGrep "current context" ${OUTPUT_FILE} -i
-        rlAssertGrep "init context" ${OUTPUT_FILE} -i
-        rlAssertGrep "controlling term" ${OUTPUT_FILE} -i
-        rlRun "sestatus --xyz 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "invalid option" ${OUTPUT_FILE} -i
-    rlPhaseEnd
-
-    rlPhaseStartTest "extreme cases"
-        # pretend that the config file contains an invalid section
-        rlRun "sed -i 's/files/xyz/' /etc/sestatus.conf"
-        rlRun "sestatus -v 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "line not in a section" ${OUTPUT_FILE} -i
-        rlRun "rm -f /etc/sestatus.conf"
-        rlRun "mkdir /etc/sestatus.conf" # intentionally replaced a file with a directory
-        rlRun "sestatus -v"
-        # pretend that the config file is missing
-        rlRun "rm -rf /etc/sestatus.conf"
-        for OPTION in "-bv" "-v" ; do
-            rlRun "sestatus ${OPTION} 2>&1 | tee ${OUTPUT_FILE}"
-            rlAssertGrep "unable to open /etc/sestatus.conf" ${OUTPUT_FILE} -i
-        done
-        rlFileRestore
-        # pretend that SELinux is disabled
-        rlRun "umount ${SELINUX_FS_MOUNT}"
-        for OPTION in "" "-b" "-v" "-bv" ; do
-            rlRun "sestatus ${OPTION} 2>&1 | tee ${OUTPUT_FILE}"
-            rlAssertGrep "selinux status.*disabled" ${OUTPUT_FILE} -i
-        done
-        rlRun "mount -t selinuxfs none ${SELINUX_FS_MOUNT}"
-        # pretend that no booleans are defined
-        rlRun "mkdir ./booleans"
-        rlRun "mount --bind ./booleans ${SELINUX_FS_MOUNT}/booleans"
-        rlRun "sestatus -b 2>&1 | tee ${OUTPUT_FILE}"
-        rlRun "umount ${SELINUX_FS_MOUNT}/booleans"
-        rlAssertNotGrep "booleans" ${OUTPUT_FILE} -i
-        rlRun "rmdir ./booleans"
-    rlPhaseEnd
-
-    # This bug is not worth fixing in RHEL-5
-    if ! rlIsRHEL 5 ; then
-    rlPhaseStartTest
-        rlRun "rpm -ql ${PACKAGE} | grep /usr/sbin/sestatus"
-        rlRun "rpm -ql ${PACKAGE} | grep /usr/share/man/man8/sestatus.8"
-        for OPTION in b v ; do
-            rlRun "sestatus --help 2>&1 | grep -- -${OPTION}"
-            rlRun "man sestatus | col -b | grep -- -${OPTION}"
-        done
-        if ! rlIsRHEL 6 ; then
-            rlRun "man -w sestatus.conf"
-        fi
-    rlPhaseEnd
-    fi
-
-    rlPhaseStartCleanup
-        rlFileRestore
-        rm -f ${OUTPUT_FILE}
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/setsebool/Makefile

@@ -1,65 +0,0 @@
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Makefile of /CoreOS/policycoreutils/Sanity/setsebool
-#   Description: does setsebool work correctly ?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-export TEST=/CoreOS/policycoreutils/Sanity/setsebool
-export TESTVERSION=1.0
-
-BUILT_FILES=
-
-FILES=$(METADATA) runtest.sh Makefile PURPOSE
-
-.PHONY: all install download clean
-
-run: $(FILES) build
-	./runtest.sh
-
-build: $(BUILT_FILES)
-	chmod a+x runtest.sh
-	chcon -t bin_t runtest.sh
-
-clean:
-	rm -f *~ $(BUILT_FILES)
-
-include /usr/share/rhts/lib/rhts-make.include
-
-$(METADATA): Makefile
-	@echo "Owner:           Milos Malik <mmalik@redhat.com>" > $(METADATA)
-	@echo "Name:            $(TEST)" >> $(METADATA)
-	@echo "TestVersion:     $(TESTVERSION)" >> $(METADATA)
-	@echo "Path:            $(TEST_DIR)" >> $(METADATA)
-	@echo "Description:     does setsebool work correctly ?" >> $(METADATA)
-	@echo "Type:            Sanity" >> $(METADATA)
-	@echo "TestTime:        45m" >> $(METADATA)
-	@echo "RunFor:          policycoreutils" >> $(METADATA)
-	@echo "Requires:        audit policycoreutils libselinux-utils shadow-utils grep" >> $(METADATA)
-	@echo "Priority:        Normal" >> $(METADATA)
-	@echo "License:         GPLv2" >> $(METADATA)
-	@echo "Confidential:    no" >> $(METADATA)
-	@echo "Destructive:     no" >> $(METADATA)
-	@echo "Releases:        -RHEL4" >> $(METADATA)
-
-	rhts-lint $(METADATA)
-

tests/setsebool/PURPOSE

@@ -1,5 +0,0 @@
-PURPOSE of /CoreOS/policycoreutils/Sanity/setsebool
-Author: Milos Malik <mmalik@redhat.com>
-
-Does setsebool work as expected? Does it produce correct audit messages?
-

tests/setsebool/runtest.sh

@@ -1,151 +0,0 @@
-#!/bin/bash
-# vim: dict=/usr/share/beakerlib/dictionary.vim cpt=.,w,b,u,t,i,k
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   runtest.sh of /CoreOS/policycoreutils/Sanity/setsebool
-#   Description: does setsebool work correctly ?
-#   Author: Milos Malik <mmalik@redhat.com>
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-#
-#   Copyright (c) 2011 Red Hat, Inc. All rights reserved.
-#
-#   This copyrighted material is made available to anyone wishing
-#   to use, modify, copy, or redistribute it subject to the terms
-#   and conditions of the GNU General Public License version 2.
-#
-#   This program is distributed in the hope that it will be
-#   useful, but WITHOUT ANY WARRANTY; without even the implied
-#   warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR
-#   PURPOSE. See the GNU General Public License for more details.
-#
-#   You should have received a copy of the GNU General Public
-#   License along with this program; if not, write to the Free
-#   Software Foundation, Inc., 51 Franklin Street, Fifth Floor,
-#   Boston, MA 02110-1301, USA.
-#
-# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
-
-# Include rhts environment
-. /usr/bin/rhts-environment.sh
-. /usr/share/beakerlib/beakerlib.sh
-
-PACKAGE="policycoreutils"
-USER_NAME="user${RANDOM}"
-USER_SECRET="s3kr3t${RANDOM}"
-BOOLEAN="ftpd_connect_db"
-if rlIsRHEL 5 6 ; then
-    SELINUX_FS_MOUNT="/selinux"
-else # RHEL-7 and above
-    SELINUX_FS_MOUNT="/sys/fs/selinux"
-fi
-
-rlJournalStart
-    rlPhaseStartSetup
-        rlAssertRpm ${PACKAGE}
-        OUTPUT_FILE=`mktemp`
-        chcon -t tmp_t ${OUTPUT_FILE}
-
-        rlRun "useradd ${USER_NAME}"
-        rlRun "echo ${USER_SECRET} | passwd --stdin ${USER_NAME}"
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        for OPTION in "" "-P" ; do
-            for OPERATOR in " " "=" ; do
-                for VALUE in 0 1 false true off on ; do
-                    rlRun "setsebool ${OPTION} ${BOOLEAN}${OPERATOR}${VALUE} | grep -i -e illegal -e usage -e invalid" 1
-                    if [ ${VALUE} == "0" -o ${VALUE} == "false" ] ; then
-                        SHOWN_VALUE="off"
-                    elif [ ${VALUE} == "1" -o ${VALUE} == "true" ] ; then
-                        SHOWN_VALUE="on"
-                    else
-                        SHOWN_VALUE=${VALUE}
-                    fi
-                    rlRun "getsebool -a | grep \"^${BOOLEAN}.*${SHOWN_VALUE}\""
-                done
-            done
-        done
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        rlRun "setsebool" 1
-        rlRun "setsebool xyz=1 2>&1 | tee /dev/stderr | grep -i -e \"invalid boolean\" -e \"not found\" -e \"not defined\""
-        rlRun "setsebool xyz=-1 2>&1 | tee /dev/stderr | grep -i \"illegal value\""
-        rlRun "setsebool xyz=2 2>&1 | tee /dev/stderr | grep -i \"illegal value\""
-        if ! rlIsRHEL 5 6 ; then
-            rlRun "setsebool -N 2>&1 | tee /dev/stderr | grep -i \"boolean.*required\""
-            rlRun "setsebool -P 2>&1 | tee /dev/stderr | grep -i \"boolean.*required\""
-        fi
-        rlRun "setsebool -P xyz=1 2>&1 | tee /dev/stderr | grep -i -e \"invalid boolean\" -e \"not found\" -e \"not defined\""
-        rlRun "setsebool -P xyz=-1 2>&1 | tee /dev/stderr | grep -i \"illegal value\""
-        rlRun "setsebool -P xyz=2 2>&1 | tee /dev/stderr | grep -i \"illegal value\""
-    rlPhaseEnd
-
-    if ! rlIsRHEL 5 6 ; then
-    rlPhaseStartTest
-        rlRun "su -l -c '/usr/sbin/setsebool allow_ypbind 0' ${USER_NAME} 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "try as root" ${OUTPUT_FILE} -i
-        rlRun "su -l -c '/usr/sbin/setsebool allow_ypbind 1' ${USER_NAME} 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "try as root" ${OUTPUT_FILE} -i
-        rlRun "su -l -c '/usr/sbin/setsebool -P allow_ypbind 0' ${USER_NAME} 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "try as root" ${OUTPUT_FILE} -i
-        rlRun "su -l -c '/usr/sbin/setsebool -P allow_ypbind 1' ${USER_NAME} 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "try as root" ${OUTPUT_FILE} -i
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        for OPTION in "" "-P" ; do
-            rlRun "getsebool allow_ypbind | grep nis_enabled"
-            rlRun "setsebool ${OPTION} allow_ypbind on"
-            rlRun "getsebool allow_ypbind | grep \"nis_enabled.*on\""
-            rlRun "setsebool ${OPTION} allow_ypbind off"
-            rlRun "getsebool allow_ypbind | grep \"nis_enabled.*off\""
-        done
-    rlPhaseEnd
-
-    rlPhaseStartTest
-        # https://fedoraproject.org/wiki/Features/SELinuxBooleansRename
-        for LINE in `cat /etc/selinux/*/booleans.subs_dist | sort | uniq | tr -s ' ' | tr ' ' ':'` ; do
-            OLD_BOOLEAN_NAME=`echo ${LINE} | cut -d : -f 1`
-            NEW_BOOLEAN_NAME=`echo ${LINE} | cut -d : -f 2`
-            rlRun "getsebool ${OLD_BOOLEAN_NAME} 2>&1 | tee ${OUTPUT_FILE}"
-            rlRun "getsebool ${NEW_BOOLEAN_NAME} 2>&1 | tee -a ${OUTPUT_FILE}"
-            rlRun "uniq -c ${OUTPUT_FILE} | grep '2 '"
-        done
-    rlPhaseEnd
-    fi
-
-    rlPhaseStartTest "audit messages"
-        START_DATE_TIME=`date "+%m/%d/%Y %T"`
-        sleep 1
-        rlRun "setsebool ${BOOLEAN} on"
-        rlRun "setsebool ${BOOLEAN} off"
-        rlRun "setsebool ${BOOLEAN} on"
-        sleep 1
-        rlRun "ausearch -m MAC_CONFIG_CHANGE -i -ts ${START_DATE_TIME} | grep \"type=MAC_CONFIG_CHANGE.*bool=${BOOLEAN} val=1 old_val=0\""
-        rlRun "ausearch -m MAC_CONFIG_CHANGE -i -ts ${START_DATE_TIME} | grep \"type=MAC_CONFIG_CHANGE.*bool=${BOOLEAN} val=0 old_val=1\""
-        if rlIsRHEL ; then
-            rlRun "ausearch -m MAC_CONFIG_CHANGE -i -ts ${START_DATE_TIME} | grep \"type=SYSCALL.*comm=setsebool\""
-        fi
-    rlPhaseEnd
-
-    rlPhaseStartTest "extreme cases"
-        # pretend that no booleans are defined
-        rlRun "mkdir ./booleans"
-        rlRun "mount --bind ./booleans ${SELINUX_FS_MOUNT}/booleans"
-        rlRun "setsebool ${BOOLEAN} on 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "could not change active booleans" ${OUTPUT_FILE} -i
-        rlRun "setsebool ${BOOLEAN} off 2>&1 | tee ${OUTPUT_FILE}"
-        rlAssertGrep "could not change active booleans" ${OUTPUT_FILE} -i
-        rlRun "umount ${SELINUX_FS_MOUNT}/booleans"
-        rlRun "rmdir ./booleans"
-    rlPhaseEnd
-
-    rlPhaseStartCleanup
-        rlRun "userdel -rf ${USER_NAME}"
-        rm -f ${OUTPUT_FILE}
-    rlPhaseEnd
-rlJournalPrintText
-rlJournalEnd
-

tests/tests.yml

@@ -1,23 +0,0 @@
----
-# Tests to run in a classic environment
-- hosts: localhost
-  roles:
-  - role: standard-test-beakerlib
-    tags:
-    - classic
-    repositories:
-    - repo: "https://src.fedoraproject.org/tests/selinux.git"
-      dest: "selinux"
-      fmf_filter: "tier: 1 | component: policycoreutils & tags: generic, fedora"
-
-# Tests for atomic host
-- hosts: localhost
-  tags:
-  - atomic
-  # no compatible tests
-
-# Tests for docker container
-- hosts: localhost
-  tags:
-  - container
-  # no compatible tests

zanata.xml

@@ -1,8 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
-<config xmlns="http://zanata.org/namespace/config/">
-  <url>https://fedora.zanata.org/</url>
-  <project>selinux</project>
-  <project-version>master</project-version>
-  <project-type>gettext</project-type>
-
-</config>