test/sandbox: verify seccomp on all test cases

This change also makes seccomp hashes cross-platform. Signed-off-by: Ophestra <cat@gensokyo.uk>
2025-07-09 03:47:16 +09:00
parent 2b44493e8a
commit e574042d76
13 changed files with 348 additions and 85 deletions
--- a/test/sandbox/case/tty.nix
+++ b/test/sandbox/case/tty.nix
@@ -9,6 +9,12 @@
  device = false;
  mapRealUid = false;
  useCommonPaths = true;
+  userns = false;
+
+  # 0, PresetExt | PresetDenyNS | PresetDenyDevel
+  expectedFilter = {
+    x86_64-linux = "0b76007476c1c9e25dbf674c29fdf609a1656a70063e49327654e1b5360ad3da06e1a3e32bf80e961c5516ad83d4b9e7e9bde876a93797e27627d2555c25858b";
+  };

  want = {
    env = [