Policy packages to be used in the test are specified using
TEST_PACKAGES variable in the Makefile. Corresponding avc_<package_name>
file has to exist for each such package.
avc_<package_name> files contain AVCs with "scontext" domain defined
in policy module installed by <package_name> RPM. The test verifies that
setroubleshoot is able to properly identify the source package.
short.log exposes a problem with Plugin Exception in catchall_labels plugin
Covers "'generator' object is not subscriptable" in sealert output:
$ sealert -a ./short.log
100% done'generator' object is not subscriptable
100% done
found 2 alerts in ./short.log
...
- when first grep fails print journal as well
- check for setroubleshoot-server instead of setroubleshoot
- improve grep assert to match "passwd" and "/usr/bin/passwd"
This test should cover cases when setroubleshoot reports "Plugin Exception"
during analyses, see https://bugzilla.redhat.com/show_bug.cgi?id=1784564
Example log with the reported problem:
setroubleshoot[834]: Plugin Exception catchall_labels
setroubleshoot[834]: Plugin Exception file
setroubleshoot[834]: Plugin Exception openvpn
Vit Mojzis
Petr Lautrbach