From 3fcd718f32e1b5075b5c28766582415d888dfb36 Mon Sep 17 00:00:00 2001
From: Justin Stephenson <jstephen@redhat.com>
Date: Fri, 24 Jan 2025 15:31:31 -0500
Subject: [PATCH] Workaround failing logins

---
 .github/workflows/intg.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/intg.yml b/.github/workflows/intg.yml
index 74f0269..4674834 100644
--- a/.github/workflows/intg.yml
+++ b/.github/workflows/intg.yml
@@ -30,6 +30,11 @@ jobs:
       run: sudo podman exec ${CONTAINER} sh -c 'rpmbuild -tb *tar.gz && dnf install -y ~/rpmbuild/RPMS/x86_64/tlog*'
     - name: Integration tests setup
       run: sudo podman exec -e CONTAINER_ENV=true ${CONTAINER} ./src/tlitest/tlitest-setup
+    - name: Workaround failing login
+      # login during tests calls 'unix_chkpwd' and this fails with
+      # openat(AT_FDCWD</>, "/etc/shadow", O_RDONLY|O_CLOEXEC) = -1 EACCES
+      # for unclear reason (CAP_DAC_* are granted)
+      run: sudo podman exec -t ${CONTAINER} chmod u+x /etc/shadow
     - name: Run tests
       # Hostnames test won't work in a container
       run: sudo podman exec -t ${CONTAINER} ./src/tlitest/tlitest-run -k "not hostnames"