From ffc7145e2b6b73e6309a22bc2935ef8d2f80bb53 Mon Sep 17 00:00:00 2001
From: Jonathan Lebon <jonathan@jlebon.com>
Date: Wed, 2 Nov 2022 13:02:55 -0400
Subject: [PATCH] tests/kola/selinux: add test that policy isn't recompiled

This is a test for https://github.com/openshift/os/issues/1036. It also
exists in the rpm-ostree CI, but let's have it here too since other
packages can break this.
---
 tests/kola/selinux/default | 14 ++++++++++++++
 1 file changed, 14 insertions(+)
 create mode 100755 tests/kola/selinux/default

diff --git a/tests/kola/selinux/default b/tests/kola/selinux/default
new file mode 100755
index 0000000000..9a54207402
--- /dev/null
+++ b/tests/kola/selinux/default
@@ -0,0 +1,14 @@
+#!/bin/bash
+# kola
+#   exclusive: false
+#   # if it works on QEMU, it should work everywhere
+#   platforms: qemu
+
+set -xeuo pipefail
+
+. $KOLA_EXT_DATA/commonlib.sh
+
+if ostree admin config-diff | grep 'selinux/targeted/policy'; then
+    fatal "SELinux policy is marked as modified"
+fi
+ok "SELinux policy not marked as modified"