[master 2/2] Kickstart: Added SELinux test.

KosiehBarter installerbot-noreply at redhat.com
Mon Jul 20 08:59:56 UTC 2015


From: Karel Valek <kvalek at redhat.com>

SELinux test merged to services test to avoid redundancy VM (save
resources).

Signed-off-by: Karel Valek <kvalek at redhat.com>
---
 tests/kickstart_tests/services.ks | 19 ++++++++++++++-----
 1 file changed, 14 insertions(+), 5 deletions(-)

diff --git a/tests/kickstart_tests/services.ks b/tests/kickstart_tests/services.ks
index cfd8224..8bc331a 100644
--- a/tests/kickstart_tests/services.ks
+++ b/tests/kickstart_tests/services.ks
@@ -16,6 +16,9 @@ rootpw testcase
 # Test services
 services --disabled=sshd --enabled=systemd-timesyncd
 
+# Test SELinux
+selinux --enforcing
+
 shutdown
 
 %packages
@@ -24,23 +27,29 @@ shutdown
 %post
 
 # Test enabled
-systemctl is-enabled systemd-timesyncd | grep enabled
+systemctl is-enabled systemd-timesyncd
 if [[ $? -ne 0 ]]; then
     echo "*** systemd-timesyncd is disabled, not enabled" >> /root/RESULT
 fi
 
 # Test disabled
-systemctl is-enabled sshd | grep disabled
-if [[ $? -ne 0 ]]; then
+systemctl is-enabled sshd
+if [[ $? -eq 0 ]]; then
     echo "*** sshd is enabled, not disabled" >> /root/RESULT
 fi
 
 # Test disabled - W/out change
-systemctl is-enabled systemd-networkd | grep disabled
-if [[ $? -ne 0 ]]; then
+systemctl is-enabled systemd-networkd
+if [[ $? -eq 0 ]]; then
     echo "*** systemd-networkd is enabled, should be disabled" >> /root/RESULT
 fi
 
+# SELinux test
+grep 'SELINUX=enforcing' /etc/selinux/config
+if [[ $? -ne 0 ]]; then
+    echo "*** SELinux not in enforcing mode" >> /root/RESULT
+fi
+
 if [[ ! -e /root/RESULT ]]; then
     echo SUCCESS > /root/RESULT
 fi


-- 
To view this commit on github, visit https://github.com/rhinstaller/anaconda/commit/78b265b61dd68397af9ff345c424407b1bb5b410


More information about the anaconda-patches mailing list