Skip to content

Commit

Permalink
Add AppArmor sysctl entries to exception list
Browse files Browse the repository at this point in the history
Fixes failing CI on Ubuntu and Fedora caused by new sysctl options.

Addressing:
```
239/278 Test OpenSCAP#239: probes/sysctl/test_sysctl_probe_all.sh .............................................***Failed    0.48 sec
Result file: test_sysctl_probe_all.res.out.49w9xN
Our names file: test_sysctl_probe_all.our.out.o4wjUZ
Sysctl names file: test_sysctl_probe_all.sysctl.out.3nEoMb
Errors file: test_sysctl_probe_all.err.out.YeCCxH
Diff (sysctlNames / ourNames): ------
56,58d55
< kernel.apparmor_restrict_unprivileged_userns
< kernel.apparmor_restrict_unprivileged_userns_complain
< kernel.apparmor_restrict_unprivileged_userns_force
```
  • Loading branch information
jan-cerny committed Oct 5, 2023
1 parent 3a987f3 commit b4b480b
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion tests/probes/sysctl/test_sysctl_probe_all.sh
Original file line number Diff line number Diff line change
Expand Up @@ -16,9 +16,12 @@ SYSCTL_EXCLUDE='
fs.protected_fifos
fs.protected_regular
fs.protected_symlinks
kernel.apparmor_display_secid_mode
kernel.apparmor_restrict_unprivileged_userns
kernel.apparmor_restrict_unprivileged_userns_complain
kernel.apparmor_restrict_unprivileged_userns_force
kernel.cad_pid
kernel.unprivileged_userns_apparmor_policy
kernel.apparmor_display_secid_mode
kernel.usermodehelper.bset
kernel.usermodehelper.inheritable
net.core.bpf_jit_harden
Expand Down

0 comments on commit b4b480b

Please sign in to comment.