diff options
| author | Ophestra <cat@gensokyo.uk> | 2025-12-15 12:43:58 +0900 |
|---|---|---|
| committer | Ophestra <cat@gensokyo.uk> | 2025-12-15 12:57:06 +0900 |
| commit | 54610aaddcc01e335c34087bc0c3bc1de6d23cf8 (patch) | |
| tree | 4e8ad54c21e4440ddd54a2be4089d7d4807f97ac /test/test.py | |
| parent | 2e806601693e0262641386ce5430d7e8d84b2a77 (diff) | |
internal/outcome: expose pipewire via pipewire-pulse
This no longer exposes the pipewire socket to the container, and instead mediates access via pipewire-pulse. This makes insecure parts of the protocol inaccessible as explained in the doc comment in hst.
Closes #29.
Signed-off-by: Ophestra <cat@gensokyo.uk>
Diffstat (limited to 'test/test.py')
| -rw-r--r-- | test/test.py | 7 |
1 files changed, 3 insertions, 4 deletions
diff --git a/test/test.py b/test/test.py index 9b06a8f2..194c2d3a 100644 --- a/test/test.py +++ b/test/test.py @@ -226,15 +226,14 @@ machine.send_chars("clear; pactl info && touch /var/tmp/pulse-ok\n") machine.wait_for_file("/var/tmp/pulse-ok", timeout=15) collect_state_ui("pulse_wayland") check_state("pa-foot", {"wayland": True, "pipewire": True}) -# Test PipeWire: -machine.send_chars("clear; pw-cli i 0 && touch /var/tmp/pw-ok\n") -machine.wait_for_file("/var/tmp/pw-ok", timeout=15) -collect_state_ui("pipewire_wayland") machine.send_chars("exit\n") machine.wait_until_fails("pgrep foot", timeout=5) # Test PipeWire SecurityContext: machine.succeed("sudo -u alice -i XDG_RUNTIME_DIR=/run/user/1000 hakurei -v run --pulse pactl info") machine.fail("sudo -u alice -i XDG_RUNTIME_DIR=/run/user/1000 hakurei -v run --pulse pactl set-sink-mute @DEFAULT_SINK@ toggle") +# Test PipeWire direct access: +machine.succeed("sudo -u alice -i XDG_RUNTIME_DIR=/run/user/1000 pw-dump") +machine.fail("sudo -u alice -i XDG_RUNTIME_DIR=/run/user/1000 hakurei -v run --pipewire pw-dump") # Test XWayland (foot does not support X): swaymsg("exec x11-alacritty") |