3 files changed, 32 insertions, 0 deletions

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index cb0d31828..9a4268787 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -71,6 +71,8 @@ jobs:
       run: command -V firejail && firejail --version
     - name: lab setup
       run: SHELL=/bin/bash make lab-setup
+    - name: run firecfg tests
+      run: SHELL=/bin/bash make test-firecfg
     - name: run network tests
       run: SHELL=/bin/bash make test-network
     - name: run appimage tests
diff --git a/Makefile b/Makefile
index fc543f8c4..8e03744fd 100644
--- a/Makefile
+++ b/Makefile
@@ -392,6 +392,13 @@ test-chroot:
 test-network:
         $(MAKE) -C test $(subst test-,,$@)
 
+# using sudo; not included in "make dist" and "make test"
+test-apparmor:
+        $(MAKE) -C test $(subst test-,,$@)
+
+# using sudo; not included in "make dist" and "make test"
+test-firecfg:
+        $(MAKE) -C test $(subst test-,,$@)
 
 
 # old gihub test; the new test is driven directly from .github/workflows/build.yml
diff --git a/test/firecfg/firecfg.sh b/test/firecfg/firecfg.sh
new file mode 100755
index 000000000..5a87f3764
--- /dev/null
+++ b/test/firecfg/firecfg.sh
@@ -0,0 +1,23 @@
+#!/bin/bash
+# This file is part of Firejail project
+# Copyright (C) 2014-2023 Firejail Authors
+# License GPL v2
+
+export MALLOC_CHECK_=3
+export MALLOC_PERTURB_=$(($RANDOM % 255 + 1))
+export LC_ALL=C
+
+sudo cat /sys/kernel/security/apparmor/profiles
+sudo firecfg
+file /usr/local/bin/ping
+ls -l /usr/local/bin
+sudo cat /sys/kernel/security/apparmor/profiles
+
+#if [[ -f /sys/kernel/security/apparmor/profiles ]]; then
+#
+#else
+#       echo "TESTING SKIP: no apparmor support in Linux kernel (test/filters/apparmor.exp)"
+#fi
+#
+#echo "TESTING: firecfg (test/firecfg/firecfg.exp)"
+#./firecfg.exp.exp