tests: add check for seccomp-assisted syscall filtering
This commit is contained in:
parent
27cb070fbf
commit
5e7b31f327
@ -386,6 +386,7 @@ EXTRA_DIST = \
|
|||||||
eventfd.expected \
|
eventfd.expected \
|
||||||
fadvise.h \
|
fadvise.h \
|
||||||
fcntl-common.c \
|
fcntl-common.c \
|
||||||
|
filter_seccomp.in \
|
||||||
filter-unavailable.expected \
|
filter-unavailable.expected \
|
||||||
fstatat.c \
|
fstatat.c \
|
||||||
fstatx.c \
|
fstatx.c \
|
||||||
|
3
tests/filter_seccomp.in
Normal file
3
tests/filter_seccomp.in
Normal file
@ -0,0 +1,3 @@
|
|||||||
|
siginfo -etrace=none
|
||||||
|
socketcall -esocketcall -a20
|
||||||
|
wait4 -esignal=none -ewait4
|
@ -85,6 +85,7 @@ fcntl64 -a8
|
|||||||
fdatasync -a14
|
fdatasync -a14
|
||||||
file_handle -e trace=name_to_handle_at,open_by_handle_at
|
file_handle -e trace=name_to_handle_at,open_by_handle_at
|
||||||
file_ioctl +ioctl.test
|
file_ioctl +ioctl.test
|
||||||
|
filter_seccomp test_prog_set -n
|
||||||
finit_module -a25
|
finit_module -a25
|
||||||
flock -a19
|
flock -a19
|
||||||
fork-f -a26 -qq -f -e signal=none -e trace=chdir
|
fork-f -a26 -qq -f -e signal=none -e trace=chdir
|
||||||
|
@ -344,6 +344,11 @@ test_trace_expr()
|
|||||||
< negative.list
|
< negative.list
|
||||||
}
|
}
|
||||||
|
|
||||||
|
test_prog_set()
|
||||||
|
{
|
||||||
|
test_pure_prog_set "$@" < "$srcdir/$NAME.in"
|
||||||
|
}
|
||||||
|
|
||||||
check_prog cat
|
check_prog cat
|
||||||
check_prog rm
|
check_prog rm
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user