summaryrefslogtreecommitdiff
path: root/test/kpod_run.bats
diff options
context:
space:
mode:
Diffstat (limited to 'test/kpod_run.bats')
-rw-r--r--test/kpod_run.bats18
1 files changed, 18 insertions, 0 deletions
diff --git a/test/kpod_run.bats b/test/kpod_run.bats
index 4945691a7..d0cac96de 100644
--- a/test/kpod_run.bats
+++ b/test/kpod_run.bats
@@ -18,3 +18,21 @@ ALPINE="docker.io/library/alpine:latest"
echo "$output"
[ "$status" -eq 0 ]
}
+
+@test "run selinux test" {
+
+ if [ ! -e /usr/sbin/selinuxenabled ] || /usr/sbin/selinuxenabled; then
+ skip "SELinux not enabled"
+ fi
+
+ firstLabel=$(${KPOD_BINARY} ${KPOD_OPTIONS} run ${ALPINE} cat /proc/self/attr/current)
+ run ${KPOD_BINARY} ${KPOD_OPTIONS} run ${ALPINE} cat /proc/self/attr/current
+ echo "$output"
+ [ "$status" -eq 0 ]
+ [ "$output" != "${firstLabel}" ]
+
+ run bash -c "${KPOD_BINARY} ${KPOD_OPTIONS} run --security-opt label:level=s0:c1,c2 ${ALPINE} cat /proc/self/attr/current | grep s0:c1,c2"
+ echo "$output"
+ [ "$status" -eq 0 ]
+
+}