Re: [LTP] ima_setup.sh: Fix check_policy_writable() for kernel < 4.5

"Andrea Cervesato" <[email protected]> Wed, 29 Jul 2026 06:54:17 +0000
Newsgroups org.kernel.vger.linux-integrity,it.linux.lists.ltp
Message-ID <[email protected]>
Hi Petr,

> > - "log" is created in the test working directory by
> >   check_policy_writable() and load_ima_policy() and is never removed.
> False positive - file is removed during cleanup of the temporary directory
> because all tests use TST_NEEDS_TMPDIR=3D1.
>=20
> > - $IMA_POLICY is expanded unquoted throughout ima_setup.sh.
> False positive - /sys/kernel/security/ima/policy does not need to be quot=
ed.

this is kinda normal (unfortunately). As you can see the amount of rules
for shell tests is really basic and it doesn't cover many cases:

https://github.com/linux-test-project/ltp-agent/blob/master/rules/shell-tes=
ts.md

Feel free to create a PR to avoid these false positive.

--
Andrea Cervesato
SUSE QE Automation Engineer Linux
[email protected]