de4d98d test if fapolicyd can create /var/lib/rpm/.dbenv.lock

2 files Authored by mmalik 3 years ago, Committed by mmalik 3 years ago,
    test if fapolicyd can create /var/lib/rpm/.dbenv.lock
    
    Recent testing of the fapolicyd service revealed that the service
    wants to write to /var/lib/rpm directory and create .dbenv.lock
    file there. This action was denied by SELinux because the SELinux policy
    brought by fapolicyd is missing an appropriate rule.
    
    I believe this access should be allowed because the fapolicyd service
    uses a rpmdb backend which is responsible for such activity.
    
    The automated TC checks if appropriate policy rules are present, but it
    does not reproduce the issue (it only appears during a reboot).
    
    The TC covers BZ#1876538.