Skip to content

Conversation

@sssd-bot
Copy link
Contributor

This is an automatic backport of PR#8348 Tests: Handle SELinux in proxy provider tests to branch sssd-2-11, created by @aborah-sudo.

Please make sure this backport is correct.

Note

The commits were cherry-picked without conflicts.

You can push changes to this pull request

git remote add sssd-bot git@github.com:sssd-bot/sssd.git
git fetch sssd-bot refs/heads/SSSD-sssd-backport-pr8348-to-sssd-2-11
git checkout SSSD-sssd-backport-pr8348-to-sssd-2-11
git push sssd-bot SSSD-sssd-backport-pr8348-to-sssd-2-11 --force

Original commits
8b0071c - Tests: Handle SELinux in proxy provider tests

Backported commits

  • bed4d77 - Tests: Handle SELinux in proxy provider tests

Original Pull Request Body

Tests using nslcd fail under SELinux enforcing due to missing policies for test-only nss-pam-ldapd configuration. Add context manager to temporarily set permissive mode for affected tests.

Tests using nslcd fail under SELinux enforcing due to missing
policies for test-only nss-pam-ldapd configuration. Add context
manager to temporarily set permissive mode for affected tests.

Reviewed-by: Jakub Vávra <jvavra@redhat.com>
(cherry picked from commit 8b0071c)
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request is a backport that addresses test failures in an SELinux enforcing environment by temporarily setting SELinux to permissive mode for the affected tests. The changes in src/tests/system/tests/test_proxy.py correctly use a context manager (client.host.selinux_permissive_for_test) to wrap the test bodies. This approach is sound and effectively resolves the issue. The implementation is correct and I have no further suggestions.

Copy link
Contributor

@jakub-vavra-cz jakub-vavra-cz left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@jakub-vavra-cz jakub-vavra-cz merged commit 2a7c804 into SSSD:sssd-2-11 Jan 19, 2026
21 of 23 checks passed
@sssd-bot
Copy link
Contributor Author

The pull request was accepted by @jakub-vavra-cz with the following PR CI status:


🟢 CodeQL (success)
🟢 rpm-build:centos-stream-10-x86_64:upstream (success)
🟢 rpm-build:fedora-42-x86_64:upstream (success)
🟢 rpm-build:fedora-43-x86_64:upstream (success)
🟢 rpm-build:fedora-rawhide-x86_64:upstream (success)
🟢 ci / intgcheck (centos-10) (success)
🟢 ci / intgcheck (fedora-42) (success)
🔴 ci / intgcheck (fedora-43) (failure)
🟢 ci / intgcheck (fedora-44) (success)
🟢 ci / prepare (success)
🟢 ci / system (centos-10) (success)
🟢 ci / system (fedora-42) (success)
🟢 ci / system (fedora-43) (success)
🔴 ci / system (fedora-44) (failure)
🟢 Static code analysis / codeql (success)
🟢 Static code analysis / pre-commit (success)
🟢 Static code analysis / python-system-tests (success)


There are unsuccessful or unfinished checks. Make sure that the failures are not related to this pull request before merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants