tests: ausearch needs --input-logs in order not to read from stdin

This commit is contained in:
Petr Lautrbach 2022-11-23 18:27:49 +01:00
parent 8a01b41a5a
commit 8252a5eb3f
1 changed files with 2 additions and 2 deletions

View File

@ -68,8 +68,8 @@ rlJournalStart
rlRun "sleep ${ANALYSIS_DELAY}"
rlRun "ps -efZ | grep setroubleshootd" 0,1
rlRun "sealert -l '*' > ${AFTER}" 0-3
rlRun "ausearch -m avc -m selinux_err -i -ts recent | grep 'read.*ls.*test-dir.*:rsync_t:.*:samba_share_t:.*tclass=dir'"
rlRun "ausearch -m avc -m selinux_err -i -ts recent | grep 'read.*cat.*test-file.*:rsync_t:.*:samba_share_t:.*tclass=file'"
rlRun "ausearch -m avc -m selinux_err -i -ts recent --input-logs | grep 'read.*ls.*test-dir.*:rsync_t:.*:samba_share_t:.*tclass=dir'"
rlRun "ausearch -m avc -m selinux_err -i -ts recent --input-logs | grep 'read.*cat.*test-file.*:rsync_t:.*:samba_share_t:.*tclass=file'"
rlRun "diff ${BEFORE} ${AFTER} | grep \"Plugin.*suggests\""
rlRun "diff ${BEFORE} ${AFTER} | grep \"Plugin ${PLUGIN_NAME} .*suggests\""
rlRun "diff /var/log/messages ./messages | grep -i -e 'setroubleshoot.*exception' -e 'no such file or directory'" 1