diff options
| author | Ed Santiago <santiago@redhat.com> | 2020-07-13 09:42:47 -0600 |
|---|---|---|
| committer | Ed Santiago <santiago@redhat.com> | 2020-07-14 14:19:22 -0600 |
| commit | fea3eea68bf483e33bae56d77071d5cb8ded91db (patch) | |
| tree | 3c80909e3199be6b1ad0f39df2e0e7e7f59bde40 /test/system/410-selinux.bats | |
| parent | 50cd21e1811f4fe508a74dc316c81a047de4e8d9 (diff) | |
| download | podman-fea3eea68bf483e33bae56d77071d5cb8ded91db.tar.gz podman-fea3eea68bf483e33bae56d77071d5cb8ded91db.tar.bz2 podman-fea3eea68bf483e33bae56d77071d5cb8ded91db.zip | |
system tests: new tests for run, exec
- Issue #6735 : problem with multiple namespaces; confirms
combinations of --userns=keep-id, --privileged, --user=XX
- Issue #6829 : --userns=keep-id will add a /etc/passwd entry
- Issue #6593 : podman exec, with --userns=keep-id, errors
(test is currently skipped because issue remains live)
...and, addendum: add new helper function, remove_same_dev_warning.
Some CI systems issue a warning on podman run --privileged:
WARNING: The same type, major and minor should not be used for multiple devices.
We already had special-case code to ignore than in the SELinux
test, but now we're seeing it in the new run tests I added, so
I've refactored the "ignore this warning" code and written
tests for the removal code.
Signed-off-by: Ed Santiago <santiago@redhat.com>
Diffstat (limited to 'test/system/410-selinux.bats')
| -rw-r--r-- | test/system/410-selinux.bats | 9 |
1 files changed, 1 insertions, 8 deletions
diff --git a/test/system/410-selinux.bats b/test/system/410-selinux.bats index 1769730f0..497e29b3e 100644 --- a/test/system/410-selinux.bats +++ b/test/system/410-selinux.bats @@ -19,15 +19,8 @@ function check_label() { # FIXME: on some CI systems, 'run --privileged' emits a spurious # warning line about dup devices. Ignore it. + remove_same_dev_warning local context="$output" - if [ ${#lines[@]} -gt 1 ]; then - if expr "${lines[0]}" : "WARNING: .* type, major" >/dev/null; then - echo "# ${lines[0]} [ignored]" >&3 - context="${lines[1]}" - else - die "FAILED: too much output, expected one single line" - fi - fi is "$context" ".*_u:system_r:.*" "SELinux role should always be system_r" |