From fbb6a71dee3ef095678c6d258ed6f2288044559b Mon Sep 17 00:00:00 2001 From: Andrew LeFevre Date: Wed, 28 May 2025 08:12:05 -0400 Subject: [PATCH] add SELinux test cases to test plan (#55180) --- .github/ISSUE_TEMPLATE/testplan.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.github/ISSUE_TEMPLATE/testplan.md b/.github/ISSUE_TEMPLATE/testplan.md index 36fbdb83bf2..26d0132822b 100644 --- a/.github/ISSUE_TEMPLATE/testplan.md +++ b/.github/ISSUE_TEMPLATE/testplan.md @@ -307,6 +307,19 @@ interactive sessions the 12 combinations are below. - [ ] Connect using Teleport from root cluster. - [ ] Connect using the Web UI from root cluster. +### With SELinux module installed + +Install the official SELinux module for Teleport SSH service using `install-selinux.sh` included in the linux amd64 release tarball +and test on RHEL 8 && 9. You will need to pass the `--enable-selinux` flag to `teleport start`, you can also pass +`--ensure-selinux-enforcing` as well to ensure SELinux is configured correctly and will enforce Teleport SSH. + +- [ ] Verify that connecting to a node with tsh works. +- [ ] Verify that connecting to a node with the Web UI works. +- [ ] Verify that enhanced session recording captures commands as expected. +- [ ] Verify that SSH agent forwarding works as expected. +- [ ] Verify that auditd logging works as expected. +- [ ] Verify that SSH connections succeed with PAM authentication enabled. + ### Teleport with EKS/GKE * [ ] Deploy Teleport on a single EKS cluster