security/hakurei
6
3
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 11 Wiki Activity

test/sandbox: verify seccomp on all test cases
All checks were successful
Test / Hakurei (push) Successful in 42s
Details
Test / Sandbox (push) Successful in 39s
Details
Test / Hakurei (race detector) (push) Successful in 41s
Details
Test / Create distribution (push) Successful in 33s
Details
Test / Sandbox (race detector) (push) Successful in 39s
Details
Test / Planterette (push) Successful in 41s
Details
Test / Flake checks (push) Successful in 1m17s
Details

Browse Source 
This change also makes seccomp hashes cross-platform.

Signed-off-by: Ophestra <cat@gensokyo.uk>
This commit is contained in:
Ophestra
2025-07-09 03:47:16 +09:00
parent 2b44493e8a
commit e574042d76
13 changed files with 348 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
container/seccomp/hash_amd64_test.go
View File

@@ -19,4 +19,6 @@ var bpfExpected = bpfLookup{
"39871b93ffafc8b979fcedc0b0c37b9e03922f5b02748dc5c3c17c92527f6e022ede1f48bff59246ea452c0d1de54827808b1a6f84f32bbde1aa02ae30eedcfa"),
{0, PresetExt | PresetDenyDevel}: toHash(
"c698b081ff957afe17a6d94374537d37f2a63f6f9dd75da7546542407a9e32476ebda3312ba7785d7f618542bcfaf27ca27dcc2dddba852069d28bcfe8cad39a"),
{0, PresetExt | PresetDenyNS | PresetDenyDevel}: toHash(
"0b76007476c1c9e25dbf674c29fdf609a1656a70063e49327654e1b5360ad3da06e1a3e32bf80e961c5516ad83d4b9e7e9bde876a93797e27627d2555c25858b"),
}

1
container/seccomp/libseccomp_test.go
View File

@@ -28,6 +28,7 @@ func TestExport(t *testing.T) {
{"strict", 0, PresetStrict, false},
{"strict compat", 0, PresetDenyNS | PresetDenyTTY | PresetDenyDevel, false},
{"hakurei default", 0, PresetExt | PresetDenyDevel, false},
{"hakurei tty", 0, PresetExt | PresetDenyNS | PresetDenyDevel, false},
}
buf := make([]byte, 8)