diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-07-01 20:23:33 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-07-01 22:11:32 +0900 |
| commit | 1a8840bebc673672235b6e10b1b9386f24751757 (patch) | |
| tree | d1e6772bfd685e2162d047e3640bd3ee55c1a1f7 /sandbox/container_test.go | |
| parent | 1fb453dffe4c83866fedfa4590be30ec65e815ff (diff) | |
sandbox/seccomp: resolve rules natively
This enables loading syscall filter policies from external cross-platform config files.
This also removes a significant amount of C code.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'sandbox/container_test.go')
| -rw-r--r-- | sandbox/container_test.go | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/sandbox/container_test.go b/sandbox/container_test.go index 7f64e128..85e40bf0 100644 --- a/sandbox/container_test.go +++ b/sandbox/container_test.go @@ -164,8 +164,8 @@ func e(root, target, vfsOptstr, fsType, source, fsOptstr string) *vfs.MountInfoE func TestContainerString(t *testing.T) { container := sandbox.New(t.Context(), "ldd", "/usr/bin/env") container.Flags |= sandbox.FAllowDevel - container.Seccomp |= seccomp.FilterMultiarch - want := `argv: ["ldd" "/usr/bin/env"], flags: 0x2, seccomp: 0x2e` + container.SeccompFlags |= seccomp.AllowMultiarch + want := `argv: ["ldd" "/usr/bin/env"], flags: 0x2, seccomp: 0x1, presets: 0x7` if got := container.String(); got != want { t.Errorf("String: %s, want %s", got, want) } |