mirror/runc
1
0
Fork 0
mirror of https://github.com/opencontainers/runc.git synced 2026-07-11 06:03:57 +08:00
Code Issues Packages Projects Releases Wiki Activity

seccomp-notify.bats: add fcntl to the important syscall list

Browse Source 
For issue 4328

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
This commit is contained in:
Akihiro Suda
2024-07-03 17:25:51 +09:00
parent e7848482e2
commit a5e660ca5b
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/integration/seccomp-notify.bats
+3 -2
View File
@@ -83,8 +83,9 @@ function scmp_act_notify_template() {
}
# Test important syscalls (some might be executed by runc) work fine when handled by the agent. noNewPrivileges FALSE.
# fcntl: https://github.com/opencontainers/runc/issues/4328
@test "runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges false)" {
scmp_act_notify_template "/bin/true" false '"execve","openat","open","read","close"'
scmp_act_notify_template "/bin/true" false '"execve","openat","open","read","close","fcntl"'
runc run test_busybox
[ "$status" -eq 0 ]
@@ -92,7 +93,7 @@ function scmp_act_notify_template() {
# Test important syscalls (some might be executed by runc) work fine when handled by the agent. noNewPrivileges TRUE.
@test "runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges true)" {
scmp_act_notify_template "/bin/true" true '"execve","openat","open","read","close"'
scmp_act_notify_template "/bin/true" true '"execve","openat","open","read","close","fcntl"'
runc run test_busybox
[ "$status" -eq 0 ]