#8608 Nightly test failure in test_sudo.py::TestSudo::test_sudo_rule_restricted_to_one_hostmask
Closed: worksforme by frenaud. Opened by fcami.

testing_master_testing_selinux failed in test_sudo:
Both test_sudo_rule_restricted_to_one_hostmask and test_sudo_rule_restricted_to_one_hostmask_negative failed.

    def test_sudo_rule_restricted_to_one_hostmask(self):
        if self.__class__.skip_hostmask_based:
            raise pytest.skip("Hostmask could not be detected")
        result1 = self.list_sudo_commands("testuser1")
>       assert "(ALL : ALL) NOPASSWD: ALL" in result1.stdout_text
E       AssertionError: assert '(ALL : ALL) NOPASSWD: ALL' in ''
E        +  where '' = <pytest_multihost.transport.SSHCommand object at 0x7f7cd6b440a0>.stdout_text
    def test_sudo_rule_restricted_to_one_hostmask_negative(self):
        result1 = self.list_sudo_commands("testuser1")
        assert result1.returncode != 0
>       assert "Sorry, user testuser1 may not run sudo on {}.".format(
            self.clientname) in result1.stderr_text
E       AssertionError: assert 'Sorry, user testuser1 may not run sudo on client0.' in 'sudo: a password is required\n'
E        +  where 'Sorry, user testuser1 may not run sudo on client0.' = <built-in method format of str object at 0x7f7cd6aebb10>('client0')
E        +    where <built-in method format of str object at 0x7f7cd6aebb10> = 'Sorry, user testuser1 may not run sudo on {}.'.format
E        +    and   'client0' = <ipatests.test_integration.test_sudo.TestSudo object at 0x7f7cd6908310>.clientname
E        +  and   'sudo: a password is required\n' = <pytest_multihost.transport.SSHCommand object at 0x7f7cd69a6550>.stderr_text

sssd_sudo logs show no commands could be found for testuser1. No suspicious SELinux AVC found.


The latest run of [testing_master_testing_selinux] in PR#594 did not raise any issue: report. Let's wait a few more runs and close if not reproduced.

Test failed in fedora 33 + updates-testing repo, see PR #644. Not related to selinux but likely to a version shipped in updates-testing repo.

Another failure: PR680, report

Another falure PR695, logs

The test is green in testing_master_rawhide, testing_master_testing, testing_master_latest, testing_master_previous, testing_ipa-4.9_previous, testing_ipa-4.6 but red in testing_ipa-4.9-latest.

testing_master_latest and testing_ipa-4.9_latest are both using fedora33 but with a different vagrant image and different pkg versions.
The diff between Working packages, Failing packages will maybe help us to identify a culprit.

The issue doesn't happen any more on [testing_ipa-4.9-latest] after we updated the vagrant image to "freeipa/ci-ipa-4-9-f33" version 0.0.3. Closing as worksforme.

Metadata Update from @frenaud:
- Issue close_status updated to: worksforme
- Issue status updated to: Closed (was: Open)

Metadata