hakurei/test/sandbox/assert.go, branch developlow-level userspace tooling for Rosa OShttp://src.rosa.moe/hakurei/atom/test/sandbox/assert.go?h=develop2025-11-12T14:03:22Ztest: move package sandbox internal2025-11-12T14:03:22ZOphestracat@gensokyo.uk2025-11-12T14:03:22Zurn:sha1:b5630f6883c874d458d9ae3c666cfb7ae5e3121d
This should never be used outside vm tests.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: check extra writable paths2025-09-14T06:12:51ZOphestracat@gensokyo.uk2025-09-14T06:12:09Zurn:sha1:83c4f8b767c31734a7e465e49ee0e23487ac22ca
This is not always obvious from mountinfo.
Signed-off-by: Ophestra <cat@gensokyo.uk>
internal/app: mount /dev/shm early2025-09-13T16:49:42ZOphestracat@gensokyo.uk2025-09-13T16:35:17Zurn:sha1:ca247b80378b7248ed4d1eda8a97e2a1d659ec7b
This avoids covering /dev/shm mounts from hst.
Signed-off-by: Ophestra <cat@gensokyo.uk>
app: set up acl on X11 socket2025-08-18T02:30:58ZOphestracat@gensokyo.uk2025-08-17T17:24:56Zurn:sha1:83a1c75f1ac4d2d611b3a96474ed07df3cb557b6
The socket is typically owned by the priv-user, and inaccessible by the target user, so just allowing access to the directory is not enough. This change fixes this oversight and add checks that will also be useful for merging https://git.gensokyo.uk/security/hakurei/pulls/1.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: verify seccomp on all test cases2025-07-08T19:21:35ZOphestracat@gensokyo.uk2025-07-08T18:47:16Zurn:sha1:e574042d765f135814c5afabaf24cb7109fab175
This change also makes seccomp hashes cross-platform.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: guard on testtool tag2025-07-07T11:11:29ZOphestracat@gensokyo.uk2025-07-07T11:11:29Zurn:sha1:2b44493e8a255b40a9809208f5c751ca7c539027
This tool should not show up when building hakurei normally.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: treat ESRCH as temporary failure2025-03-29T18:50:59ZOphestracat@gensokyo.uk2025-03-29T18:50:59Zurn:sha1:f772940768d9cada256f8f3291a3b9e9685003c3
This is an ugly fix that makes various assumptions guaranteed to hold true in the testing vm. The test package is filtered by the build system so some ugliness is tolerable here.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: separate check filter2025-03-29T17:15:08ZOphestracat@gensokyo.uk2025-03-29T13:34:51Zurn:sha1:8886c40974bb64720a23a2ac9780a11e8910bd7f
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox: check seccomp outcome2025-03-27T17:24:27ZOphestracat@gensokyo.uk2025-03-27T17:24:27Zurn:sha1:ff3cfbb437795c7fee547b8340014071625a61a8
This is as ugly as it is because it has to have CAP_SYS_ADMIN and not be in seccomp mode.
Signed-off-by: Ophestra <cat@gensokyo.uk>
test/sandbox/ptrace: dump seccomp bpf program2025-03-27T16:35:56ZOphestracat@gensokyo.uk2025-03-27T16:09:26Zurn:sha1:660a2898dc0dbfe9963d8f336e04582955b56b8a
Signed-off-by: Ophestra <cat@gensokyo.uk>