diff options
| author | Ophestra <cat@gensokyo.uk> | 2026-03-28 16:43:02 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2026-03-28 16:48:26 +0900 |
| commit | b1ea3b4acf85365fd76c890f8b8852b5f95be5c1 (patch) | |
| tree | 465f21c2af64100da97d8441ff54d70a0fb2158a /test/sandbox/test.py | |
| parent | 2c254c70b8838369a48c49f55a0346a7740f1514 (diff) | |
cmd/hakurei: rename app to run
The run command was a legacy holdover from very early days and is only useful for testing and demonstration these days. This change also renames it to exec.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'test/sandbox/test.py')
| -rw-r--r-- | test/sandbox/test.py | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/test/sandbox/test.py b/test/sandbox/test.py index c1191483..f188a01d 100644 --- a/test/sandbox/test.py +++ b/test/sandbox/test.py @@ -42,23 +42,23 @@ machine.wait_for_file("/run/user/1000/wayland-1") machine.wait_for_file("/tmp/sway-ipc.sock") # Check pd seccomp outcome: -swaymsg("exec hakurei run cat") +swaymsg("exec hakurei exec cat") check_filter(0, "pdlike", "cat") # Check fd leak: -swaymsg("exec exec 127</proc/cmdline && hakurei -v run sleep infinity") +swaymsg("exec exec 127</proc/cmdline && hakurei -v exec sleep infinity") pd_identity0_sleep_pid = int(machine.wait_until_succeeds("pgrep -U 10000 -x sleep", timeout=60)) print(machine.succeed(f"hakurei-test fd {pd_identity0_sleep_pid}")) machine.succeed(f"kill -INT {pd_identity0_sleep_pid}") # Verify capabilities/securebits in user namespace: -print(machine.succeed("sudo -u alice -i hakurei run capsh --print")) -print(machine.succeed("sudo -u alice -i hakurei run capsh --has-no-new-privs")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-a=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-b=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-i=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-p=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run umount -R /dev")) +print(machine.succeed("sudo -u alice -i hakurei exec capsh --print")) +print(machine.succeed("sudo -u alice -i hakurei exec capsh --has-no-new-privs")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-a=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-b=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-i=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-p=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec umount -R /dev")) # Check sandbox outcome: machine.succeed("install -dm0777 /tmp/.hakurei-store-rw/{upper,work}") |