Skip to content

Conversation

@joelcapitao
Copy link
Member

vasd policy was removed from SELinux policy [1][2], so we update our test against another component, preferably a more stable one. I think "pam_shield" is a good candidate.

Closes coreos/rhel-coreos-config#92

[1] fedora-selinux/selinux-policy#2923
[2] https://issues.redhat.com/browse/RHEL-116512

vasd policy was removed from SELinux policy [1][2], so we update
our test against another component, preferably a more stable one.
I think "pam_shield" is a good candidate.

Closes coreos/rhel-coreos-config#92

[1] fedora-selinux/selinux-policy#2923
[2] https://issues.redhat.com/browse/RHEL-116512
Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates an SELinux test to use pam_shield instead of the removed vasd policy. The change is correct, but I've suggested a small refactoring to improve the test's maintainability by using constants for repeated strings. This will make future updates to the test easier.

Copy link
Member

@HuijingHei HuijingHei left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@joelcapitao joelcapitao marked this pull request as draft November 6, 2025 09:35
@joelcapitao joelcapitao marked this pull request as ready for review November 6, 2025 10:38
@joelcapitao joelcapitao merged commit ea6c8cb into coreos:main Nov 6, 2025
6 checks passed
@dustymabe
Copy link
Member

Thank you for working on this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

c10s: failing rhcos.selinux.manage test

3 participants