[PATCH testsuite] tmt: allow nlmsg also to the ssh_server attribute

Ondrej Mosnacek <[email protected]> Mon, 27 Jul 2026 09:38:52 +0200
Newsgroups org.kernel.vger.selinux
Message-ID <[email protected]>
Without this SSH doesn't work under the latest Rawhide policy and the
test run fails to complete successfully.

Signed-off-by: Ondrej Mosnacek <[email protected]>
---
 tmt/tests.fmf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tmt/tests.fmf b/tmt/tests.fmf
index fe90c69..08bd129 100644
--- a/tmt/tests.fmf
+++ b/tmt/tests.fmf
@@ -48,7 +48,7 @@
         echo "(policycap netlink_xperm)" >>base.cil
         echo "(policycap bpf_token_perms)" >>base.cil
         # allow nlmsg to some system domains so that the system can boot
-        for source in daemon initrc_domain systemprocess unconfined_domain_type sysadm_t; do
+        for source in daemon initrc_domain systemprocess ssh_server unconfined_domain_type sysadm_t; do
           echo "(allow $source self (netlink_route_socket (nlmsg)))" >>base.cil
           echo "(allow $source self (netlink_tcpdiag_socket (nlmsg)))" >>base.cil
           echo "(allow $source self (netlink_xfrm_socket (nlmsg)))" >>base.cil
-- 
2.55.0