tests/mac_admin: skip another test on nfs

Skip another test of undefined label handling that is not guaranteed to
work over labeled NFS and breaks if SELinux namespaces are enabled due
to the global SID table correctly preserving the undefined context value,
producing an error within NFSv4 for which no error handling path exists.
Possibly consider disabling this entire set of tests.

Signed-off-by: Stephen Smalley <[email protected]>

Author: stephensmalley

tests/mac_admin/test

@@ -11,7 +11,7 @@ BEGIN {
         plan tests => 8;
     }
     else {
-        plan tests => 7;
+        plan tests => 6;
     }
 }
 
@@ -49,12 +49,13 @@ if ( $isnfs ne "nfs" ) {
       `runcon -t test_mac_admin_t -- secon -t -f $basedir/test_dir 2>&1`;
     chomp($result);
     ok( $result, "UNDEFINED" );
-}
 
-# Verify that test_no_mac_admin_t sees the unlabeled context.
-$result = `runcon -t test_no_mac_admin_t -- secon -t -f $basedir/test_dir 2>&1`;
-chomp($result);
-ok( $result, "unlabeled_t" );
+    # Verify that test_no_mac_admin_t sees the unlabeled context.
+    $result =
+      `runcon -t test_no_mac_admin_t -- secon -t -f $basedir/test_dir 2>&1`;
+    chomp($result);
+    ok( $result, "unlabeled_t" );
+}
 
 # Delete the test directory
 system("rm -rf $basedir/test_dir");