Hi team,

If the network server was set in capp mode, all of the remote test cases will be failed.

I checked the code, find the function in network/run.conf netfilebt/run.conf and netfilter/run.conf sent lspp_test_generic_t to network server, and got lbl_tst_server fail to set sockcon.

In capp mode, it could not install lspp_test.pp, becuase it depends on auditadm_r.

Do you think it's a bug?

#
# get_test_domain - Get the SELinux domain for the test applet
#
# INPUT
# $1 : the labeling type
# $2 : the host type
#
# OUTPUT
# Writes the SELinux domain to stdout
#
# DESCRIPTION
# This function determines the correct SELinux domain to use for the test
# applet based on the given labeling type.
#
function get_test_domain {
    declare type_arg=$1 host_arg=$2

    case $PPROFILE-$host_arg in
    lspp-*|capp-remote)
            case $type_arg in
        netlabel)
            echo "lspp_test_netlabel_t"
            ;;
        ipsec)
            echo "lspp_test_ipsec_t"
            ;;
        unlabeled)
            echo "lspp_test_generic_t"
            ;;
        *)
            exit_fail "invalid test argument"
                ;;
        esac
        ;;
    capp-local)
        case $type_arg in
            *)
            echo "unconfined_t"
            ;;
        esac
        ;;
    esac
}