Address issues raised by shellcheck SC2295:
  "Expansions inside ${..} need to be quoted separately, otherwise they
   will match as a pattern."

There's not variable digest_type but it's a plain string and therefore
treat it as such.

Signed-off-by: Stefan Berger <[email protected]>
Cc: Mimi Zohar <[email protected]>
---
 tests/Makefile.am   | 2 +-
 tests/fsverity.test | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/tests/Makefile.am b/tests/Makefile.am
index 4ce71f4..7b3d92b 100644
--- a/tests/Makefile.am
+++ b/tests/Makefile.am
@@ -28,7 +28,7 @@ distclean: distclean-keys
 shellcheck:
        shellcheck \
                -i SC2086,SC2181,SC2046,SC2320,SC2317,SC2034,SC2164,SC2166 \
-               -i SC2294,SC2206,SC2196,SC2043 \
+               -i SC2294,SC2206,SC2196,SC2043,SC2295 \
                functions.sh gen-keys.sh install-fsverity.sh \
                install-mount-idmapped.sh install-openssl3.sh \
                install-swtpm.sh install-tss.sh softhsm_setup \
diff --git a/tests/fsverity.test b/tests/fsverity.test
index ddd6993..a6ba68b 100755
--- a/tests/fsverity.test
+++ b/tests/fsverity.test
@@ -169,7 +169,7 @@ unqualified_bprm_rule() {
        local rule_match="measure func=BPRM_CHECK"
        local rule_dontmatch="fsuuid"
 
-       if [ -z "${rule##*$digest_type=verity*}" ]; then
+       if [ -z "${rule##*digest_type=verity*}" ]; then
                if grep "$rule_match" $IMA_POLICY_FILE | grep -v 
"$rule_dontmatch"  &> /dev/null; then
                        return "$SKIP"
                fi
-- 
2.43.0


Reply via email to