diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-07-02 00:22:27 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-07-02 00:22:27 +0900 |
| commit | d5532aade0c3f042c5daa7d1c16e7cce2f4b524a (patch) | |
| tree | d34166a17ad57439edf1a59d5f54ecc605bd1ba4 /sandbox/seccomp/libseccomp_test.go | |
| parent | 0c5409aec7455cbe9e34b0e4d2f0edf0bc3c6e37 (diff) | |
sandbox/seccomp: native rule slice in helpers
These helper functions took FilterPreset as input for ease of integration. This moves them to []NativeRule.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'sandbox/seccomp/libseccomp_test.go')
| -rw-r--r-- | sandbox/seccomp/libseccomp_test.go | 11 |
1 files changed, 6 insertions, 5 deletions
diff --git a/sandbox/seccomp/libseccomp_test.go b/sandbox/seccomp/libseccomp_test.go index 236a8d80..a4ca9a1f 100644 --- a/sandbox/seccomp/libseccomp_test.go +++ b/sandbox/seccomp/libseccomp_test.go @@ -88,7 +88,7 @@ func TestExport(t *testing.T) { buf := make([]byte, 8) for _, tc := range testCases { t.Run(tc.name, func(t *testing.T) { - e := New(tc.presets, tc.flags) + e := New(Preset(tc.presets, tc.flags), tc.flags) digest := sha512.New() if _, err := io.CopyBuffer(digest, e, buf); (err != nil) != tc.wantErr { @@ -107,7 +107,7 @@ func TestExport(t *testing.T) { } t.Run("close without use", func(t *testing.T) { - e := New(0, 0) + e := New(Preset(0, 0), 0) if err := e.Close(); !errors.Is(err, syscall.EINVAL) { t.Errorf("Close: error = %v", err) return @@ -115,7 +115,7 @@ func TestExport(t *testing.T) { }) t.Run("close partial read", func(t *testing.T) { - e := New(0, 0) + e := New(Preset(0, 0), 0) if _, err := e.Read(nil); err != nil { t.Errorf("Read: error = %v", err) return @@ -133,8 +133,9 @@ func TestExport(t *testing.T) { func BenchmarkExport(b *testing.B) { buf := make([]byte, 8) for i := 0; i < b.N; i++ { - e := New(PresetExt| - PresetDenyNS|PresetDenyTTY|PresetDenyDevel|PresetLinux32, + e := New( + Preset(PresetExt|PresetDenyNS|PresetDenyTTY|PresetDenyDevel|PresetLinux32, + AllowMultiarch|AllowCAN|AllowBluetooth), AllowMultiarch|AllowCAN|AllowBluetooth) if _, err := io.CopyBuffer(io.Discard, e, buf); err != nil { b.Fatalf("cannot export: %v", err) |