diff mbox series

[testsuite,03/24] test_global.te: don't add domains to system_r

Message ID 20220729120229.207584-4-omosnace@redhat.com (mailing list archive)
State Superseded
Delegated to: Ondrej Mosnáček
Headers show
Series Clean up testsuite policy and support running as sysadm_t | expand

Commit Message

Ondrej Mosnacek July 29, 2022, 12:02 p.m. UTC 
It doesn't seem to be useful and is unlikely to work without extra rules
anyway.

Signed-off-by: Ondrej Mosnacek <omosnace@redhat.com>
---
 policy/test_global.te | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)
diff mbox series

Patch

diff --git a/policy/test_global.te b/policy/test_global.te
index dae20d6..800e55f 100644
--- a/policy/test_global.te
+++ b/policy/test_global.te
@@ -9,13 +9,11 @@  policy_module(test_policy,1.0.0)
 attribute testdomain;
 
 gen_require(`
-	role system_r;
 	role sysadm_r;
 ')
 
-# Authorize sysadm_r and system_r for the test domains.
+# Authorize sysadm_r for the test domains.
 role sysadm_r types testdomain;
-role system_r types testdomain;
 
 # Allow the test domains to access the sysadm terminal.
 # This allows read and write sysadm ttys and ptys.