Skip to content

Commit 7063887

Browse files
committed
tmt: Disable rhel-ci AVC check for expected SELinux denials
We have a probe for `install_t` which causes an AVC denial. At some point we'll need to fix that, but for now set AVC_ERROR=+no_avc_check in the integration plan environment to disable the check since it's gating in RHEL now. Assisted-by: OpenCode (Claude Opus 4) Signed-off-by: Colin Walters <walters@verbum.org>
1 parent 1a86982 commit 7063887

1 file changed

Lines changed: 6 additions & 0 deletions

File tree

tmt/plans/integration.fmf

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,12 @@
22
provision:
33
how: virtual
44
image: $@{test_disk_image}
5+
# bootc probes for SELinux mac_admin/install_t capability by attempting
6+
# chcon with an intentionally invalid label (see lsm.rs test_install_t).
7+
# This generates expected AVC denials that rhel-ci's injected AVC check
8+
# would otherwise flag as test failures.
9+
environment:
10+
AVC_ERROR: +no_avc_check
511
prepare:
612
# Install image mode system on package mode system
713
# Do not run on image mode VM running on Github CI and Locally

0 commit comments

Comments
 (0)