test/sandbox: verify seccomp on all test cases

This change also makes seccomp hashes cross-platform. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-09 03:47:16 +09:00
parent 2b44493e8a
commit e574042d76
13 changed files with 348 additions and 85 deletions
--- a/test/sandbox/case/mapuid.nix
+++ b/test/sandbox/case/mapuid.nix
@@ -9,6 +9,12 @@
  device = false;
  mapRealUid = true;
  useCommonPaths = true;
+  userns = false;
+
+  # 0, PresetStrict
+  expectedFilter = {
+    x86_64-linux = "e880298df2bd6751d0040fc21bc0ed4c00f95dc0d7ba506c244d8b8cf6866dba8ef4a33296f287b66cccc1d78e97026597f84cc7dec1573e148960fbd35cd735";
+  };

  want = {
    env = [