57 lines
838 B
Nix
57 lines
838 B
Nix
{
|
|
lib,
|
|
callPackage,
|
|
foot,
|
|
|
|
version,
|
|
}:
|
|
let
|
|
fs = mode: dir: data: {
|
|
mode = lib.fromHexString mode;
|
|
inherit
|
|
dir
|
|
data
|
|
;
|
|
};
|
|
|
|
ent = fsname: dir: type: opts: freq: passno: {
|
|
inherit
|
|
fsname
|
|
dir
|
|
type
|
|
opts
|
|
freq
|
|
passno
|
|
;
|
|
};
|
|
|
|
checkSandbox = callPackage ../. { inherit version; };
|
|
|
|
callTestCase =
|
|
path:
|
|
let
|
|
tc = import path {
|
|
inherit
|
|
fs
|
|
ent
|
|
;
|
|
};
|
|
in
|
|
{
|
|
name = "check-sandbox-${tc.name}";
|
|
verbose = true;
|
|
share = foot;
|
|
packages = [ ];
|
|
command = builtins.toString (checkSandbox tc.name tc.want);
|
|
extraPaths = [
|
|
{
|
|
src = "/proc/mounts";
|
|
dst = "/.fortify/mounts";
|
|
}
|
|
];
|
|
};
|
|
in
|
|
{
|
|
preset = callTestCase ./preset.nix;
|
|
}
|