Skip to content

Missing CI coverage for feat_selinux/feat_smack without an actual SELinux/SMACK kernel #13332

Description

@Chaganti-Reddy

feat_selinux only gets tested in the Build/SELinux job, which boots a Fedora VM with SELinux on purpose. feat_smack isn't built in CI at all. So the 'not enabled' code paths never run anywhere.

Found this in #13311 — a stale Cargo.toml comment claimed both features need an enabled kernel to run, which isn't true, and that wrong assumption hid a real bug where mkdir's SMACK branch silently ignored --context instead of warning. Would be good to have a plain ubuntu-latest job building with both features where neither kernel module is actually on.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions