search

martinpitt / umockdev

Mock hardware devices for creating unit tests and bug reporting
https://launchpad.net/umockdev
GNU Lesser General Public License v2.1
308 stars 54 forks source link

Set SELinux context #220

Closed ikerexxe closed 8 months ago

ikerexxe commented 9 months ago

We'd like to be able to use umockdev as unprivileged users in a SELinux environment. Currently, the SELinux labels aren't set to the correct values for our application to access the files, thus making umockdev unusable in this context.

The request is to provide a way to set up the SELinux context, either by recording it in the umockdev recording, or by setting it via the API.

martinpitt commented 8 months ago

Right, umockdev-record could put the context into the .umockdev file, and umockdev-run could set it. That has to happen via the API, so that will come first anyway.

ikerexxe commented 8 months ago

Then, I guess we'll need an API option to set the context, and then a way to "record" and "run" to the file.

martinpitt commented 8 months ago

Yes, that's what I'm working on now in the selinux branch. I'll let you review the PR once it is in a consumable shape. But I'm on a sprint this week, so won't finish today; but tomorrow there's a good chance I have something.

martinpitt commented 8 months ago

I pushed a first PR #222 for this. It may need a little polish, but it's ready for testing (including automatic COPR)