Compare commits

...

5 Commits

Author SHA1 Message Date
Petr Lautrbach 8252a5eb3f tests: ausearch needs --input-logs in order not to read from stdin 2022-11-24 10:43:15 +01:00
Petr Lautrbach 8a01b41a5a setroubleshoot-3.3.31
- Add a screen reader label to the icon
- seapplet: avoid ValueError when parsing sealert.conf
- doc: Document performance related changes
- Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Use setup from setuptools
- Use `pip install` instead of `setup.py install`
2022-11-24 08:26:51 +01:00
Milos Malik 2a65b427f9 run Tier1 tests via TMT/FMF
Use the TMT/FMF instead of STI for running tests. STI does not respect
the adjust section in main.fmf files of stored tests.

Related: rhbz#2107109
2022-11-24 08:26:01 +01:00
Petr Lautrbach 5c577d9903 Migrate License tag to SPDX
https://fedoraproject.org/wiki/Changes/SPDX_Licenses_Phase_1
2022-11-24 08:25:32 +01:00
Petr Lautrbach 533e7fa485 Drop gtk2-devel BR
It's not necessary anymore
2022-11-24 08:23:07 +01:00
14 changed files with 95 additions and 30 deletions

1
.fmf/version Normal file
View File

@ -0,0 +1 @@
1

1
.gitignore vendored
View File

@ -215,3 +215,4 @@ setroubleshoot-2.2.93.tar.gz
/setroubleshoot-3.3.28.tar.gz
/setroubleshoot-3.3.29.tar.gz
/setroubleshoot-3.3.30.tar.gz
/setroubleshoot-3.3.31.tar.gz

6
plans/tests.fmf Normal file
View File

@ -0,0 +1,6 @@
summary: Tier 1 setroubleshoot test plan
discover:
how: fmf
execute:
how: tmt

View File

@ -3,9 +3,9 @@
Summary: Helps troubleshoot SELinux problems
Name: setroubleshoot
Version: 3.3.30
Version: 3.3.31
Release: 1%{?dist}
License: GPLv2+
License: GPL-2.0-or-later
URL: https://gitlab.com/setroubleshoot/setroubleshoot
Source0: https://gitlab.com/setroubleshoot/setroubleshoot/-/archive/%{version}/setroubleshoot-%{version}.tar.gz
Source1: %{name}.tmpfiles
@ -15,8 +15,8 @@ Source2: %{name}.sysusers
BuildRequires: gcc
BuildRequires: make
BuildRequires: libcap-ng-devel
BuildRequires: intltool gettext python3 python3-devel
BuildRequires: desktop-file-utils dbus-glib-devel gtk2-devel libnotify-devel libselinux-devel polkit-devel
BuildRequires: intltool gettext python3 python3-devel python3-setuptools python3-pip
BuildRequires: desktop-file-utils dbus-glib-devel libnotify-devel libselinux-devel polkit-devel
BuildRequires: audit-libs-devel >= 3.0.1
BuildRequires: python3-libselinux python3-dasbus python3-gobject gtk3-devel
# for the _tmpfilesdir macro
@ -179,6 +179,7 @@ to user preference. The same tools can be run on existing log files.
%{_mandir}/man8/sedispatch.8.gz
%{_mandir}/man8/setroubleshootd.8.gz
%config /etc/audit/plugins.d/sedispatch.conf
%{_unitdir}/setroubleshootd.service
%{_datadir}/dbus-1/system-services/org.fedoraproject.Setroubleshootd.service
%{_datadir}/dbus-1/system-services/org.fedoraproject.SetroubleshootPrivileged.service
%{_datadir}/polkit-1/actions/org.fedoraproject.setroubleshootfixit.policy
@ -190,6 +191,14 @@ to user preference. The same tools can be run on existing log files.
%doc AUTHORS COPYING ChangeLog DBUS.md NEWS README TODO
%changelog
* Wed Nov 23 2022 Petr Lautrbach <lautrbach@redhat.com> - 3.3.31-1
- Add a screen reader label to the icon
- seapplet: avoid ValueError when parsing sealert.conf
- doc: Document performance related changes
- Decrease setroubleshootd priority and limit RAM utilization to 1GB
- Use setup from setuptools
- Use `pip install` instead of `setup.py install`
* Tue Jun 28 2022 Petr Lautrbach <plautrba@redhat.com> - 3.3.30-1
- Miscellaneous python and build system changes
- Fix couple of typos

View File

@ -1 +1 @@
SHA512 (setroubleshoot-3.3.30.tar.gz) = 49955fdba875b2c1b6e338cf37bb0805cb33a515d45aac66a89885b32d8caa67f7fbd6ac0e6de7b1beb6b144c48b466e45913c7e58c7e794339842dc97c12464
SHA512 (setroubleshoot-3.3.31.tar.gz) = e3ab60a81c851e1a68b43e6e08b6901caa2c507318ccb24992d24cca785cd3fbbb9e3d94b51f214a42ee3aba200d6d92eefaf38b71251794489a51844913ed64

View File

@ -0,0 +1,19 @@
summary: Test for BZ#1811644 (Let setroubleshoot to report bugs on components)
contact: Vit Mojzis <vmojzis@redhat.com>
component:
- setroubleshoot
test: ./runtest.sh
framework: beakerlib
recommend:
- setroubleshoot-server
- flatpak-selinux
- tpm2-abrmd-selinux
- container-selinux
- usbguard-selinux
- mysql-selinux
- fapolicyd-selinux
duration: 5m
link:
- relates: https://bugzilla.redhat.com/show_bug.cgi?id=1811644
extra-summary: /CoreOS/setroubleshoot/Regression/Report-bugs-on-corresponding-components
extra-task: /CoreOS/setroubleshoot/Regression/Report-bugs-on-corresponding-components

View File

@ -26,7 +26,6 @@
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Include Beaker environment
. /usr/bin/rhts-environment.sh || exit 1
. /usr/share/beakerlib/beakerlib.sh || exit 1
PACKAGE="setroubleshoot"

View File

@ -0,0 +1,15 @@
summary: Does setroubleshoot report any 'Plugin Exception' during analyses?
contact: Petr Lautrbach <plautrba@redhat.com>
component:
- setroubleshoot
test: ./runtest.sh
framework: beakerlib
recommend:
- setroubleshoot-server
environment:
AVC_ERROR: +no_avc_check
duration: 5m
link:
- relates: https://bugzilla.redhat.com/show_bug.cgi?id=1784564
extra-summary: /CoreOS/setroubleshoot/Regression/no-plugin-exception-during-analyses
extra-task: /CoreOS/setroubleshoot/Regression/no-plugin-exception-during-analyses

View File

@ -27,7 +27,6 @@
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Include Beaker environment
. /usr/bin/rhts-environment.sh || exit 1
. /usr/share/beakerlib/beakerlib.sh || exit 1
PACKAGE="setroubleshoot"

View File

@ -0,0 +1,13 @@
summary: Test for traceback when using sealert -s with display set to invalid value
contact: Vit Mojzis <vmojzis@redhat.com>
component:
- setroubleshoot
test: ./runtest.sh
framework: beakerlib
recommend:
- setroubleshoot
duration: 5m
link:
- relates: https://bugzilla.redhat.com/show_bug.cgi?id=1574434
extra-summary: /CoreOS/setroubleshoot/Regression/sealert-s-traceback-invalid-display
extra-task: /CoreOS/setroubleshoot/Regression/sealert-s-traceback-invalid-display

View File

@ -26,7 +26,6 @@
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Include Beaker environment
. /usr/bin/rhts-environment.sh || exit 1
. /usr/share/beakerlib/beakerlib.sh || exit 1
PACKAGE="setroubleshoot-server"

View File

@ -0,0 +1,24 @@
summary: Does the plugin work as expected?
description: |+
Does the plugin work as expected?
Default value of ANALYSIS_DELAY can be overriden.
contact: Milos Malik <mmalik@redhat.com>
component:
- setroubleshoot-plugins
test: ./runtest.sh
framework: beakerlib
recommend:
- setroubleshoot-plugins
- setroubleshoot-server
- audit
- setools-console
- psmisc
- libselinux-utils
- rsyslog
environment:
AVC_ERROR: +no_avc_check
duration: 10m
extra-summary: /CoreOS/setroubleshoot-plugins/Sanity/public_content
extra-task: /CoreOS/setroubleshoot-plugins/Sanity/public_content

View File

@ -27,7 +27,6 @@
# ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
# Include Beaker environment
. /usr/bin/rhts-environment.sh || exit 1
. /usr/share/beakerlib/beakerlib.sh || exit 1
PACKAGE="setroubleshoot-plugins"
@ -69,8 +68,8 @@ rlJournalStart
rlRun "sleep ${ANALYSIS_DELAY}"
rlRun "ps -efZ | grep setroubleshootd" 0,1
rlRun "sealert -l '*' > ${AFTER}" 0-3
rlRun "ausearch -m avc -m selinux_err -i -ts recent | grep 'read.*ls.*test-dir.*:rsync_t:.*:samba_share_t:.*tclass=dir'"
rlRun "ausearch -m avc -m selinux_err -i -ts recent | grep 'read.*cat.*test-file.*:rsync_t:.*:samba_share_t:.*tclass=file'"
rlRun "ausearch -m avc -m selinux_err -i -ts recent --input-logs | grep 'read.*ls.*test-dir.*:rsync_t:.*:samba_share_t:.*tclass=dir'"
rlRun "ausearch -m avc -m selinux_err -i -ts recent --input-logs | grep 'read.*cat.*test-file.*:rsync_t:.*:samba_share_t:.*tclass=file'"
rlRun "diff ${BEFORE} ${AFTER} | grep \"Plugin.*suggests\""
rlRun "diff ${BEFORE} ${AFTER} | grep \"Plugin ${PLUGIN_NAME} .*suggests\""
rlRun "diff /var/log/messages ./messages | grep -i -e 'setroubleshoot.*exception' -e 'no such file or directory'" 1

View File

@ -1,19 +0,0 @@
- hosts: localhost
roles:
- role: standard-test-beakerlib
tags:
- classic
tests:
- Regression/embedded-null-byte-in-audit-records
- Regression/no-plugin-exception-during-analyses
- Regression/sealert-s-traceback-invalid-display
- Regression/Report-bugs-on-corresponding-components
- Sanity/public_content
required_packages:
- setroubleshoot-server
- setroubleshoot-plugins
- audit
- setools-console
- psmisc
- libselinux-utils
- rsyslog