test_ioctl_xperms.te: check also max supported kernel policy

SELinuxProject / selinux-testsuite

This is the upstream SELinux testsuite which is designed as a basic set of regression tests for the SELinux kernel functionality.

GNU General Public License v2.0

53 stars 43 forks source link

test_ioctl_xperms.te: check also max supported kernel policy #34

Closed jstancek closed 7 years ago

jstancek commented 7 years ago

Running newer userspace with older kernel makes the test fail: libsepol.avtab_write_item: policy version 28 does not support ioctl extendedpermissions rules and one was specified

Add a check for max supported kernel policy and skip ioctl_xperms on older kernels.

Signed-off-by: Jan Stancek jstancek@redhat.com

jstancek commented 7 years ago

Patch refreshed to read policyvers from selinuxfs mount.