xfs
[Top] [All Lists]

[PATCH] xfstests: mount with security context if SELinux is enabled

To: xfs mailing list <xfs@xxxxxxxxxxx>
Subject: [PATCH] xfstests: mount with security context if SELinux is enabled
From: Eric Sandeen <sandeen@xxxxxxxxxxx>
Date: Tue, 04 Nov 2008 10:17:22 -0600
Sender: xfs-bounce@xxxxxxxxxxx
User-agent: Thunderbird 2.0.0.16 (X11/20080723)
When SELinux is enabled, it adds extra xattrs for security
attributes which can change the output of various tests, causing
them to fail.

If SELinux is enabled, mount with a liberal/permissive context
for the entire filesystem, so that SELinux xattrs don't get
created.

Signed-off-by: Eric Sandeen <sandeen@xxxxxxxxxxx>
---

Index: xfs-cmds/xfstests/common.rc
===================================================================
--- xfs-cmds.orig/xfstests/common.rc
+++ xfs-cmds/xfstests/common.rc
@@ -39,9 +39,18 @@ dd()
 
 _mount_opts()
 {
+    # SELinux adds extra xattrs which can mess up our expected output.
+    # So, mount with a context, and they won't be created
+    # nfs_t is a "liberal" context so we can use it.
+    if [ "$HOSTOS" == "Linux" ]; then
+       if [ -x /usr/sbin/selinuxenabled ] && /usr/sbin/selinuxenabled; then
+               SELINUX_OPTIONS="-o context=system_u:object_r:nfs_t:s0"
+       fi
+    fi
+
     case $FSTYP in
     xfs)
-       export MOUNT_OPTIONS=$XFS_MOUNT_OPTIONS
+       export MOUNT_OPTIONS="$XFS_MOUNT_OPTIONS $SELINUX_OPTIONS"
        ;;
     udf)
        export MOUNT_OPTIONS=$UDF_MOUNT_OPTIONS


<Prev in Thread] Current Thread [Next in Thread>