diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-07-09 03:47:16 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-07-09 04:21:35 +0900 |
| commit | e574042d765f135814c5afabaf24cb7109fab175 (patch) | |
| tree | 6301ab836acc681c90891ca199c5dcc8cdca9ad3 /container | |
| parent | 2b44493e8a255b40a9809208f5c751ca7c539027 (diff) | |
test/sandbox: verify seccomp on all test cases
This change also makes seccomp hashes cross-platform.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'container')
| -rw-r--r-- | container/seccomp/hash_amd64_test.go | 2 | ||||
| -rw-r--r-- | container/seccomp/libseccomp_test.go | 1 |
2 files changed, 3 insertions, 0 deletions
diff --git a/container/seccomp/hash_amd64_test.go b/container/seccomp/hash_amd64_test.go index bc5f420c..7ef2b1d7 100644 --- a/container/seccomp/hash_amd64_test.go +++ b/container/seccomp/hash_amd64_test.go @@ -19,4 +19,6 @@ var bpfExpected = bpfLookup{ "39871b93ffafc8b979fcedc0b0c37b9e03922f5b02748dc5c3c17c92527f6e022ede1f48bff59246ea452c0d1de54827808b1a6f84f32bbde1aa02ae30eedcfa"), {0, PresetExt | PresetDenyDevel}: toHash( "c698b081ff957afe17a6d94374537d37f2a63f6f9dd75da7546542407a9e32476ebda3312ba7785d7f618542bcfaf27ca27dcc2dddba852069d28bcfe8cad39a"), + {0, PresetExt | PresetDenyNS | PresetDenyDevel}: toHash( + "0b76007476c1c9e25dbf674c29fdf609a1656a70063e49327654e1b5360ad3da06e1a3e32bf80e961c5516ad83d4b9e7e9bde876a93797e27627d2555c25858b"), } diff --git a/container/seccomp/libseccomp_test.go b/container/seccomp/libseccomp_test.go index 8135b59c..8443adec 100644 --- a/container/seccomp/libseccomp_test.go +++ b/container/seccomp/libseccomp_test.go @@ -28,6 +28,7 @@ func TestExport(t *testing.T) { {"strict", 0, PresetStrict, false}, {"strict compat", 0, PresetDenyNS | PresetDenyTTY | PresetDenyDevel, false}, {"hakurei default", 0, PresetExt | PresetDenyDevel, false}, + {"hakurei tty", 0, PresetExt | PresetDenyNS | PresetDenyDevel, false}, } buf := make([]byte, 8) |