diff options
Diffstat (limited to 'test/sandbox/test.py')
| -rw-r--r-- | test/sandbox/test.py | 18 |
1 files changed, 9 insertions, 9 deletions
diff --git a/test/sandbox/test.py b/test/sandbox/test.py index c1191483..f188a01d 100644 --- a/test/sandbox/test.py +++ b/test/sandbox/test.py @@ -42,23 +42,23 @@ machine.wait_for_file("/run/user/1000/wayland-1") machine.wait_for_file("/tmp/sway-ipc.sock") # Check pd seccomp outcome: -swaymsg("exec hakurei run cat") +swaymsg("exec hakurei exec cat") check_filter(0, "pdlike", "cat") # Check fd leak: -swaymsg("exec exec 127</proc/cmdline && hakurei -v run sleep infinity") +swaymsg("exec exec 127</proc/cmdline && hakurei -v exec sleep infinity") pd_identity0_sleep_pid = int(machine.wait_until_succeeds("pgrep -U 10000 -x sleep", timeout=60)) print(machine.succeed(f"hakurei-test fd {pd_identity0_sleep_pid}")) machine.succeed(f"kill -INT {pd_identity0_sleep_pid}") # Verify capabilities/securebits in user namespace: -print(machine.succeed("sudo -u alice -i hakurei run capsh --print")) -print(machine.succeed("sudo -u alice -i hakurei run capsh --has-no-new-privs")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-a=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-b=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-i=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run capsh --has-p=CAP_SYS_ADMIN")) -print(machine.fail("sudo -u alice -i hakurei run umount -R /dev")) +print(machine.succeed("sudo -u alice -i hakurei exec capsh --print")) +print(machine.succeed("sudo -u alice -i hakurei exec capsh --has-no-new-privs")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-a=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-b=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-i=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec capsh --has-p=CAP_SYS_ADMIN")) +print(machine.fail("sudo -u alice -i hakurei exec umount -R /dev")) # Check sandbox outcome: machine.succeed("install -dm0777 /tmp/.hakurei-store-rw/{upper,work}") |