From a5e660ca5b3045545c2a442f0cae2b3f1862958e Mon Sep 17 00:00:00 2001 From: Akihiro Suda Date: Wed, 3 Jul 2024 17:25:51 +0900 Subject: [PATCH] seccomp-notify.bats: add fcntl to the important syscall list For issue 4328 Signed-off-by: Akihiro Suda --- tests/integration/seccomp-notify.bats | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/tests/integration/seccomp-notify.bats b/tests/integration/seccomp-notify.bats index d979cf09c..584920902 100644 --- a/tests/integration/seccomp-notify.bats +++ b/tests/integration/seccomp-notify.bats @@ -83,8 +83,9 @@ function scmp_act_notify_template() { } # Test important syscalls (some might be executed by runc) work fine when handled by the agent. noNewPrivileges FALSE. +# fcntl: https://github.com/opencontainers/runc/issues/4328 @test "runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges false)" { - scmp_act_notify_template "/bin/true" false '"execve","openat","open","read","close"' + scmp_act_notify_template "/bin/true" false '"execve","openat","open","read","close","fcntl"' runc run test_busybox [ "$status" -eq 0 ] @@ -92,7 +93,7 @@ function scmp_act_notify_template() { # Test important syscalls (some might be executed by runc) work fine when handled by the agent. noNewPrivileges TRUE. @test "runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges true)" { - scmp_act_notify_template "/bin/true" true '"execve","openat","open","read","close"' + scmp_act_notify_template "/bin/true" true '"execve","openat","open","read","close","fcntl"' runc run test_busybox [ "$status" -eq 0 ]