From e119db7a23c773ca94b84a9f0086d1e5a12890f4 Mon Sep 17 00:00:00 2001 From: Shengjing Zhu Date: Mon, 4 Jul 2022 16:03:31 +0800 Subject: [PATCH] tests: enable seccomp default action tests on arm Signed-off-by: Shengjing Zhu --- tests/integration/seccomp.bats | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/tests/integration/seccomp.bats b/tests/integration/seccomp.bats index e81beca33..c24eeb26a 100644 --- a/tests/integration/seccomp.bats +++ b/tests/integration/seccomp.bats @@ -43,8 +43,8 @@ function teardown() { | .process.noNewPrivileges = false | .linux.seccomp = { "defaultAction":"SCMP_ACT_ALLOW", - "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32"], - "syscalls":[{"names":["mkdir"], "action":"SCMP_ACT_ERRNO"}] + "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32","SCMP_ARCH_X86_64","SCMP_ARCH_AARCH64","SCMP_ARCH_ARM"], + "syscalls":[{"names":["mkdir","mkdirat"], "action":"SCMP_ACT_ERRNO"}] }' runc run test_busybox @@ -57,8 +57,8 @@ function teardown() { | .process.noNewPrivileges = false | .linux.seccomp = { "defaultAction":"SCMP_ACT_ALLOW", - "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32"], - "syscalls":[{"names":["mkdir"], "action":"SCMP_ACT_ERRNO", "errnoRet": 100}] + "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32","SCMP_ARCH_X86_64","SCMP_ARCH_AARCH64","SCMP_ARCH_ARM"], + "syscalls":[{"names":["mkdir","mkdirat"], "action":"SCMP_ACT_ERRNO", "errnoRet": 100}] }' runc run test_busybox @@ -71,8 +71,8 @@ function teardown() { | .process.noNewPrivileges = false | .linux.seccomp = { "defaultAction":"SCMP_ACT_ALLOW", - "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32"], - "syscalls":[{"names":["mkdir"], "action":"SCMP_ACT_KILL"}] + "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32","SCMP_ARCH_X86_64","SCMP_ARCH_AARCH64","SCMP_ARCH_ARM"], + "syscalls":[{"names":["mkdir","mkdirat"], "action":"SCMP_ACT_KILL"}] }' runc run test_busybox @@ -84,8 +84,8 @@ function teardown() { update_config ' .process.args = ["/bin/true"] | .linux.seccomp = { "defaultAction":"SCMP_ACT_ALLOW", - "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32"], - "syscalls":[{"names":["mkdir"], "action":"SCMP_ACT_KILL"}] + "architectures":["SCMP_ARCH_X86","SCMP_ARCH_X32","SCMP_ARCH_X86_64","SCMP_ARCH_AARCH64","SCMP_ARCH_ARM"], + "syscalls":[{"names":["mkdir","mkdirat"], "action":"SCMP_ACT_KILL"}] } | .hooks = { "startContainer": [ {