Re: [PATCH] testsuite: enable running over labeled NFS

[Stephen Smalley <sds@tycho.nsa.gov>]

On 1/29/20 3:29 PM, Stephen Smalley wrote:
> Certain tests cannot succeed on nfs and therefore should
> be skipped in that case.  This allows the testsuite to
> be run on a labeled NFS mount as described below without
> triggering any (additional) failures relative to running
> on a local filesystem like ext4.
> 
> The tests that are skipped or modified and the corresponding rationale is:
> file: 1 test skipped - flock not supported over NFS
> capable_file: all tests skipped - file capabilities not supported over NFS
> capable_sys: 1 test skipped - CAP_SYS_RAWIO not supported over NFS
> overlay: all tests skipped - NFS not supported as an upperdir
> mac_admin: one test modified - undefined contexts not exported over NFS
> 
> This partly addresses
> https://github.com/SELinuxProject/selinux-testsuite/issues/32.
> 
> Test sequence for labeled NFS is:
> $ cat nfs.sh
> MOUNT=/home # must be a top-level mount
> TESTDIR=$MOUNT/path/to/selinux-testsuite
> systemctl start nfs-server
> exportfs -orw,no_root_squash,security_label localhost:$MOUNT
> mkdir -p /mnt/selinux-testsuite
> mount -t nfs -o vers=4.2 localhost:$TESTDIR /mnt/selinux-testsuite
> pushd /mnt/selinux-testsuite
> make test
> popd
> umount /mnt/selinux-testsuite
> exportfs -u localhost:$MOUNT
> systemctl stop nfs-server
> 
> Signed-off-by: Stephen Smalley <sds@tycho.nsa.gov>

This is now applied.

> ---
>   tests/capable_file/test | 28 +++++++++++++++++++---------
>   tests/capable_sys/test  | 32 +++++++++++++++++++++++---------
>   tests/file/test         | 22 +++++++++++++++++-----
>   tests/mac_admin/test    | 18 ++++++++++++++----
>   tests/overlay/test      | 11 ++++++++---
>   5 files changed, 81 insertions(+), 30 deletions(-)

[...]