[master 2/2] Kickstart: Added SELinux test.
KosiehBarter
installerbot-noreply at redhat.com
Mon Jul 20 08:59:56 UTC 2015
From: Karel Valek <kvalek at redhat.com>
SELinux test merged to services test to avoid redundancy VM (save
resources).
Signed-off-by: Karel Valek <kvalek at redhat.com>
---
tests/kickstart_tests/services.ks | 19 ++++++++++++++-----
1 file changed, 14 insertions(+), 5 deletions(-)
diff --git a/tests/kickstart_tests/services.ks b/tests/kickstart_tests/services.ks
index cfd8224..8bc331a 100644
--- a/tests/kickstart_tests/services.ks
+++ b/tests/kickstart_tests/services.ks
@@ -16,6 +16,9 @@ rootpw testcase
# Test services
services --disabled=sshd --enabled=systemd-timesyncd
+# Test SELinux
+selinux --enforcing
+
shutdown
%packages
@@ -24,23 +27,29 @@ shutdown
%post
# Test enabled
-systemctl is-enabled systemd-timesyncd | grep enabled
+systemctl is-enabled systemd-timesyncd
if [[ $? -ne 0 ]]; then
echo "*** systemd-timesyncd is disabled, not enabled" >> /root/RESULT
fi
# Test disabled
-systemctl is-enabled sshd | grep disabled
-if [[ $? -ne 0 ]]; then
+systemctl is-enabled sshd
+if [[ $? -eq 0 ]]; then
echo "*** sshd is enabled, not disabled" >> /root/RESULT
fi
# Test disabled - W/out change
-systemctl is-enabled systemd-networkd | grep disabled
-if [[ $? -ne 0 ]]; then
+systemctl is-enabled systemd-networkd
+if [[ $? -eq 0 ]]; then
echo "*** systemd-networkd is enabled, should be disabled" >> /root/RESULT
fi
+# SELinux test
+grep 'SELINUX=enforcing' /etc/selinux/config
+if [[ $? -ne 0 ]]; then
+ echo "*** SELinux not in enforcing mode" >> /root/RESULT
+fi
+
if [[ ! -e /root/RESULT ]]; then
echo SUCCESS > /root/RESULT
fi
--
To view this commit on github, visit https://github.com/rhinstaller/anaconda/commit/78b265b61dd68397af9ff345c424407b1bb5b410
More information about the anaconda-patches
mailing list