콘텐츠로 이동

QA:Testcase SELinux Errors on Desktop clients

Release relevance

This Testcase applies the following versions of Rocky Linux: 8, 9

Associated release criterion

This test case is associated with the Release_Criteria#selinux-and-crash-notifications-desktop-only release criterion. If you are doing release validation testing, a failure of this test case may be a breach of that release criterion.

Description

Basically running a Workstation or Graphical Server install for a longer amount of time, while using it and then checking if there were any SELinux audit messages. There must be no SELinux denial logs in /var/log/audit/audit.log , nor crash notifications on boot, during installation, or during first login.

  • ⬇️ - Low priority. It would be good to have this tested, but if it isn't or if it fails then it is inconsequential.
  • ❗ - Important. It is best to have this tested, but if it isn't or if it fails then it won't block the release.

Releases and Architectures

Distro aarch64 ppc64le riscv64 s390x x86_64
Rocky Linux 9 ❗ ⬇️ N/A ⬇️ ❗
Rocky Linux 10 ❗ ⬇️ ⬇️ ⬇️ ❗

Setup

Obtain access to a suitable system with either a Workstation or a Graphical Server installation.

How to test

  1. Setup new machine or get access to a installed machine
  2. Click through the system and various applications, to mimic user behavior
  3. Leave the system running for a few more minutes, if possible hours

Expected Results

  1. Open the SETroubleshoot Application and invoke the error summarization.
  2. There must not be shown any errors / denials

Additional Information

If you have questions with respect to this content or to report concerns regarding the use or misuse content please do not hesitate to contact us at testing@rockylinux.org.

Rocky Linux and the Rocky Enterprise Software Foundation (RESF) does not make any express or implied warranties, including but not limited to the warranties of non-infringement of any third party intellectual property rights. RESF does not warrant that any pending trademark applications for trademarks of RESF will result in any granted trademark protection. RESF shall not be liable for any claims relating to user's activities falling within the scope of the permission and user hereby agrees to indemnify, defend and hold RESF and its contributors harmless against any such claim.

This work is heavily inspired by the Fedora Quality Assurance documents which were made available under Attribution-Share Alike 4.0 International license unless otherwise noted.

This content is licensed under under Attribution-Share Alike 4.0 International license unless otherwise noted.

Author: Lukas Magauer

Contributors: Chris Stackpole