selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies with no errors Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies with no errors" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:4)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot behaves like an idempotent resource applies a second time without changes Failure/Error: super NameError: undefined local variable or method `manifest' for #<RSpec::ExampleGroups::SelinuxClassModeSwitching::WhenSwitchingFromEnforcingToDisabled::BeforeReboot::BehavesLikeAnIdempotentResource "applies a second time without changes" (./vendor/bundle/ruby/3.2.0/gems/voxpupuli-acceptance-3.0.0/lib/voxpupuli/acceptance/examples.rb:8)> Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_disabled_spec.rb:60

selinux class - mode switching when switching from enforcing to disabled before reboot File "/etc/selinux/config" content is expected to match /^SELINUX=disabled$/ Failure/Error: its(:content) { is_expected.to match(%r{^SELINUX=disabled$}) } expected "\n# This file controls the state of SELinux on the system.\n# SELINUX=enforcing\n# enforcing - S...processes are protected. \n# mls - Multi Level Security protection.\nSELINUXTYPE=targeted\n\n\n" to match /^SELINUX=disabled$/ Diff: @@ -1,12 +1,23 @@ -/^SELINUX=disabled$/ + +# This file controls the state of SELinux on the system. +# SELINUX=enforcing +# enforcing - SELinux security policy is enforced. +# permissive - SELinux prints warnings instead of enforcing. +# disabled - No SELinux policy is loaded. +SELINUX=enforcing +# SELINUXTYPE= can take one of these three values: +# targeted - Targeted processes are protected, +# minimum - Modification of targeted policy. Only selected processes are protected. +# mls - Multi Level Security protection. +SELINUXTYPE=targeted

selinux class - mode switching when switching from enforcing to disabled before reboot Command "getenforce" stdout is expected to match /^Permissive$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Permissive$}) } expected "Enforcing\n" to match /^Permissive$/ Diff: @@ -1 +1 @@ -/^Permissive$/ +Enforcing

selinux class - mode switching when switching from enforcing to disabled after reboot applies without changes Failure/Error: apply_manifest(pp, catch_changes: true) Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet7.example.com' exited with 2 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135549072.pp.np6wm3 Last 10 lines of output were: Info: Loading facts Info: Loading facts �[mNotice: Compiled catalog for almalinux8-64-puppet7.example.com in environment production in 0.06 seconds Info: Using environment 'production' Info: Applying configuration version '1706363751' �[mNotice: /Stage[main]/Selinux::Config/File_line[set-selinux-config-to-disabled]/ensure: created �[mNotice: /Stage[main]/Selinux::Config/Exec[change-selinux-status-to-disabled]/returns: executed successfully �[mNotice: Applied catalog in 0.22 seconds

selinux class - mode switching when switching from enforcing to disabled after reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class - mode switching while disabled File "/var/test" selinux_label is expected to eq "?" Failure/Error: its(:selinux_label) { is_expected.to eq('?') } expected: "?" got: "unconfined_u:object_r:var_t:s0" (compared using ==)

selinux class - mode switching when switching from disabled to permissive before reboot Command "getenforce" stdout is expected to match /^Disabled$/ Failure/Error: its(:stdout) { is_expected.to match(%r{^Disabled$}) } expected "Permissive\n" to match /^Disabled$/ Diff: @@ -1 +1 @@ -/^Disabled$/ +Permissive

selinux class behaves like an idempotent resource applies a second time without changes Failure/Error: raise CommandFailure, "Host '#{self}' exited with #{result.exit_code} running:\n #{cmdline}\nLast #{@options[:trace_limit]} lines of output were:\n#{result.formatted_output(@options[:trace_limit])}" Beaker::Host::CommandFailure: Host 'almalinux8-64-puppet7.example.com' exited with 1 running: puppet apply --verbose --detailed-exitcodes /tmp/apply_manifest_135739944.pp.iFSQgC Last 10 lines of output were: Info: Loading facts Info: Loading facts Warning: This function is deprecated, please use stdlib::ensure_packages instead. at ["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/refpolicy_package.pp", 14]:["/etc/puppetlabs/code/environments/production/modules/selinux/manifests/module.pp", 72] (location: /etc/puppetlabs/code/environments/production/modules/stdlib/lib/puppet/functions/deprecation.rb:35:in `deprecation') �[mNotice: Compiled catalog for almalinux8-64-puppet7.example.com in environment production in 0.18 seconds Info: Using environment 'production' Error: Failed to apply catalog: Cannot alias Selinux_fcontext[absent] to ["/tmp/fcontexts_source(/.*)?_a"]; resource ["Selinux_fcontext", "/tmp/fcontexts_source(/.*)?_a"] already declared (file: /etc/puppetlabs/code/environments/production/modules/selinux/manifests/fcontext.pp, line: 59) Shared Example Group: "an idempotent resource" called from ./spec/acceptance/class_spec.rb:108