Re: [Audit-test-developer] RHEL-7.1 audit-test suite pushed as rhel7_1

[Paul M. <pa...@pa...>]

On Thu, May 17, 2018 at 5:44 AM, Jiri Jaburek <jja...@re...> wrote:
> I unfortunately don't think I have the time needed to do upstream work
> for the project. I also don't think it's really worth putting the effort
> in - these days, you have things like
>
>   https://github.com/SELinuxProject/selinux-testsuite
>   https://github.com/linux-audit
>
> in addition to LTP and other projects.

On Fri, May 18, 2018 at 5:43 AM, Cyril Hrubis <ch...@su...> wrote:
> Given that there are upstream repositories for audit and selinux it
> would probably makes sense to reuse these for the certification purposes
> in the long term.

Granted my CC evaluation experience is quite old at this point, but I
don't believe the current selinux-testsuite and audit-testsuite are
sufficient, or even close to being sufficient, for CC evaluation.
While I think both of those test suites could benefit from addition
tests, the audit-testsuite is especially lacking, I believe that
adding the tests necessary for CC certification is out-of-scope for
those test suites.  There is a reason why I started maintaining those
test suites again and didn't attempt to use the audit-test suite.

Regardless, it looks like the larger problem is a lack of resources
needed to maintain the audit-test test suite.  That's unfortunate, but
I don't see any way to change that.

-- 
paul moore
www.paul-moore.com