diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-11-05 02:47:43 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-11-05 02:47:43 +0900 |
| commit | c1399f5030abde76728ba7982a7a22fd49e75359 (patch) | |
| tree | 06e2a2ce11dbd7536150fd57824e406f101d50d9 /container/container_test.go | |
| parent | 9ac63aac0cb025d1de195dbc57d0c89ebd1d7cc5 (diff) | |
std: rename from comp
Seccomp lookup tables are going to be relocated here, and PNR constants.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'container/container_test.go')
| -rw-r--r-- | container/container_test.go | 28 |
1 files changed, 14 insertions, 14 deletions
diff --git a/container/container_test.go b/container/container_test.go index 67d795f9..cf699f2c 100644 --- a/container/container_test.go +++ b/container/container_test.go @@ -21,8 +21,8 @@ import ( "hakurei.app/command" "hakurei.app/container" "hakurei.app/container/check" - "hakurei.app/container/comp" "hakurei.app/container/seccomp" + "hakurei.app/container/std" "hakurei.app/container/vfs" "hakurei.app/hst" "hakurei.app/ldd" @@ -206,20 +206,20 @@ var containerTestCases = []struct { rules []seccomp.NativeRule flags seccomp.ExportFlag - presets comp.FilterPreset + presets std.FilterPreset }{ {"minimal", true, false, false, true, emptyOps, emptyMnt, - 1000, 100, nil, 0, comp.PresetStrict}, + 1000, 100, nil, 0, std.PresetStrict}, {"allow", true, true, true, false, emptyOps, emptyMnt, - 1000, 100, nil, 0, comp.PresetExt | comp.PresetDenyDevel}, + 1000, 100, nil, 0, std.PresetExt | std.PresetDenyDevel}, {"no filter", false, true, true, true, emptyOps, emptyMnt, - 1000, 100, nil, 0, comp.PresetExt}, + 1000, 100, nil, 0, std.PresetExt}, {"custom rules", true, true, true, false, emptyOps, emptyMnt, - 1, 31, []seccomp.NativeRule{{Syscall: seccomp.ScmpSyscall(syscall.SYS_SETUID), Errno: seccomp.ScmpErrno(syscall.EPERM)}}, 0, comp.PresetExt}, + 1, 31, []seccomp.NativeRule{{Syscall: seccomp.ScmpSyscall(syscall.SYS_SETUID), Errno: seccomp.ScmpErrno(syscall.EPERM)}}, 0, std.PresetExt}, {"tmpfs", true, false, false, true, earlyOps(new(container.Ops). @@ -228,7 +228,7 @@ var containerTestCases = []struct { earlyMnt( ent("/", hst.PrivateTmp, "rw,nosuid,nodev,relatime", "tmpfs", "ephemeral", ignore), ), - 9, 9, nil, 0, comp.PresetStrict}, + 9, 9, nil, 0, std.PresetStrict}, {"dev", true, true /* go test output is not a tty */, false, false, earlyOps(new(container.Ops). @@ -246,7 +246,7 @@ var containerTestCases = []struct { ent("/", "/dev/mqueue", "rw,nosuid,nodev,noexec,relatime", "mqueue", "mqueue", "rw"), ent("/", "/dev/shm", "rw,nosuid,nodev,relatime", "tmpfs", "tmpfs", ignore), ), - 1971, 100, nil, 0, comp.PresetStrict}, + 1971, 100, nil, 0, std.PresetStrict}, {"dev no mqueue", true, true /* go test output is not a tty */, false, false, earlyOps(new(container.Ops). @@ -263,7 +263,7 @@ var containerTestCases = []struct { ent("/", "/dev/pts", "rw,nosuid,noexec,relatime", "devpts", "devpts", "rw,mode=620,ptmxmode=666"), ent("/", "/dev/shm", "rw,nosuid,nodev,relatime", "tmpfs", "tmpfs", ignore), ), - 1971, 100, nil, 0, comp.PresetStrict}, + 1971, 100, nil, 0, std.PresetStrict}, {"overlay", true, false, false, true, func(t *testing.T) (*container.Ops, context.Context) { @@ -300,7 +300,7 @@ var containerTestCases = []struct { ",redirect_dir=nofollow,uuid=on,userxattr"), } }, - 1 << 3, 1 << 14, nil, 0, comp.PresetStrict}, + 1 << 3, 1 << 14, nil, 0, std.PresetStrict}, {"overlay ephemeral", true, false, false, true, func(t *testing.T) (*container.Ops, context.Context) { @@ -324,7 +324,7 @@ var containerTestCases = []struct { ent("/", hst.PrivateTmp, "rw", "overlay", "overlay", ignore), } }, - 1 << 3, 1 << 14, nil, 0, comp.PresetStrict}, + 1 << 3, 1 << 14, nil, 0, std.PresetStrict}, {"overlay readonly", true, false, false, true, func(t *testing.T) (*container.Ops, context.Context) { @@ -352,7 +352,7 @@ var containerTestCases = []struct { ",redirect_dir=nofollow,userxattr"), } }, - 1 << 3, 1 << 14, nil, 0, comp.PresetStrict}, + 1 << 3, 1 << 14, nil, 0, std.PresetStrict}, } func TestContainer(t *testing.T) { @@ -560,9 +560,9 @@ func TestContainerString(t *testing.T) { c := container.NewCommand(t.Context(), msg, check.MustAbs("/run/current-system/sw/bin/ldd"), "ldd", "/usr/bin/env") c.SeccompFlags |= seccomp.AllowMultiarch c.SeccompRules = seccomp.Preset( - comp.PresetExt|comp.PresetDenyNS|comp.PresetDenyTTY, + std.PresetExt|std.PresetDenyNS|std.PresetDenyTTY, c.SeccompFlags) - c.SeccompPresets = comp.PresetStrict + c.SeccompPresets = std.PresetStrict want := `argv: ["ldd" "/usr/bin/env"], filter: true, rules: 65, flags: 0x1, presets: 0xf` if got := c.String(); got != want { t.Errorf("String: %s, want %s", got, want) |
