summaryrefslogtreecommitdiffstats
path: root/src
diff options
context:
space:
mode:
authorYu Watanabe <watanabe.yu+github@gmail.com>2023-08-12 15:08:47 +0200
committerYu Watanabe <watanabe.yu+github@gmail.com>2023-08-22 04:50:20 +0200
commit9ae3624889b98f75efa6fd0c5f4b4de3eaf328d4 (patch)
tree07870c2186a15af7f68a6efbaa1472b881ea853f /src
parentcore: do not leak mount for credentials directory if mount namespace is enabled (diff)
downloadsystemd-9ae3624889b98f75efa6fd0c5f4b4de3eaf328d4.tar.xz
systemd-9ae3624889b98f75efa6fd0c5f4b4de3eaf328d4.zip
test-execute: add tests for credentials directory with mount namespace
This also adds cases that open_tree() and move_mount() are filtered, to emulate old kernel behavior.
Diffstat (limited to 'src')
-rw-r--r--src/test/test-execute.c4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/test/test-execute.c b/src/test/test-execute.c
index 0be66c2c7b..847415b9ae 100644
--- a/src/test/test-execute.c
+++ b/src/test/test-execute.c
@@ -282,7 +282,11 @@ static void test_exec_cpuaffinity(Manager *m) {
static void test_exec_credentials(Manager *m) {
test(m, "exec-set-credential.service", 0, CLD_EXITED);
+ test(m, "exec-set-credential-with-mount-namespace.service", 0, CLD_EXITED);
+ test(m, "exec-set-credential-with-seccomp.service", 0, CLD_EXITED);
test(m, "exec-load-credential.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED);
+ test(m, "exec-load-credential-with-mount-namespace.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED);
+ test(m, "exec-load-credential-with-seccomp.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED);
test(m, "exec-credentials-dir-specifier.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED);
}