Gentoo Archives: gentoo-commits

From: Jason Zaman <perfinion@g.o>
To: gentoo-commits@l.g.o
Subject: [gentoo-commits] proj/hardened-refpolicy:master commit in: .github/workflows/
Date: Mon, 31 Jan 2022 19:31:22
Message-Id: 1643651720.2b974a96b895b5c4c7dc7991ccd6e441344ba003.perfinion@gentoo
1 commit: 2b974a96b895b5c4c7dc7991ccd6e441344ba003
2 Author: Christian Göttsche <cgzones <AT> googlemail <DOT> com>
3 AuthorDate: Sat Jan 29 17:56:38 2022 +0000
4 Commit: Jason Zaman <perfinion <AT> gentoo <DOT> org>
5 CommitDate: Mon Jan 31 17:55:20 2022 +0000
6 URL: https://gitweb.gentoo.org/proj/hardened-refpolicy.git/commit/?id=2b974a96
7
8 Revert "tests.yml: Disable policy_module() selint checks."
9
10 This reverts commit 5781a2393cfbc6592cf52abff1eda08afb15c898.
11
12 SELint 1.2.1 supports the new policy_module syntax.
13
14 Signed-off-by: Christian Göttsche <cgzones <AT> googlemail.com>
15 Signed-off-by: Jason Zaman <perfinion <AT> gentoo.org>
16
17 .github/workflows/tests.yml | 11 +++++------
18 1 file changed, 5 insertions(+), 6 deletions(-)
19
20 diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
21 index a8676631..86834fff 100644
22 --- a/.github/workflows/tests.yml
23 +++ b/.github/workflows/tests.yml
24 @@ -36,12 +36,11 @@ jobs:
25 - name: Run file context checker
26 run: python3 -t -t -E -W error testing/check_fc_files.py
27
28 -# Disable selint until it can handle a single parameter policy_module().
29 -# - name: Run SELint
30 -# run: |
31 -# # disable C-005 (Permissions in av rule or class declaration not ordered) for now: needs fixing
32 -# # disable W-005 (Interface call from module not in optional_policy block): refpolicy does not follow this rule
33 -# #selint --source --recursive --summary --fail --disable C-005 --disable W-005 policy
34 + - name: Run SELint
35 + run: |
36 + # disable C-005 (Permissions in av rule or class declaration not ordered) for now: needs fixing
37 + # disable W-005 (Interface call from module not in optional_policy block): refpolicy does not follow this rule
38 + selint --source --recursive --summary --fail --disable C-005 --disable W-005 policy
39
40 build:
41 runs-on: ubuntu-latest