Re: [PATCH v3 1/2] checkpolicy: extend bad-data tests for type, role, and user errors

Stephen Smalley <[email protected]> Wed, 29 Jul 2026 09:24:32 -0400
Newsgroups org.kernel.vger.selinux
Message-ID <CAEjxPJ5Ddd=-X2vKA7oHzDF-ZZ-_GZyfc_z_XEwXuxePZWb29A@mail.gmail.com>
On Tue, Jul 28, 2026 at 12:47 PM Akhil Kohli <[email protected]> wrote:
>
> Add negative .te fixtures for duplicate type/attribute declarations,
> type/attribute name conflicts, invalid type names, and malformed role
> and user stanzas. Run checkmodule negative tests as non-root in CI so
> the unreadable .te case is exercised outside root-only skips.
>
> Signed-off-by: Akhil Kohli <[email protected]>
> ---

> diff --git a/.github/workflows/run_tests.yml b/.github/workflows/run_tests.yml
> index 4322ddff..fd78969f 100644
> --- a/.github/workflows/run_tests.yml
> +++ b/.github/workflows/run_tests.yml
> @@ -94,6 +94,17 @@ jobs:
>            sudo userdel -r bad-data-test 2>/dev/null || true
>            echo "::endgroup::"
>          fi
> +

Trailing whitespace here, git should have warned you about it.