diff options
author | Yu Watanabe <watanabe.yu+github@gmail.com> | 2023-08-12 15:08:47 +0200 |
---|---|---|
committer | Yu Watanabe <watanabe.yu+github@gmail.com> | 2023-08-22 04:50:20 +0200 |
commit | 9ae3624889b98f75efa6fd0c5f4b4de3eaf328d4 (patch) | |
tree | 07870c2186a15af7f68a6efbaa1472b881ea853f /src | |
parent | core: do not leak mount for credentials directory if mount namespace is enabled (diff) | |
download | systemd-9ae3624889b98f75efa6fd0c5f4b4de3eaf328d4.tar.xz systemd-9ae3624889b98f75efa6fd0c5f4b4de3eaf328d4.zip |
test-execute: add tests for credentials directory with mount namespace
This also adds cases that open_tree() and move_mount() are filtered, to
emulate old kernel behavior.
Diffstat (limited to 'src')
-rw-r--r-- | src/test/test-execute.c | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/test/test-execute.c b/src/test/test-execute.c index 0be66c2c7b..847415b9ae 100644 --- a/src/test/test-execute.c +++ b/src/test/test-execute.c @@ -282,7 +282,11 @@ static void test_exec_cpuaffinity(Manager *m) { static void test_exec_credentials(Manager *m) { test(m, "exec-set-credential.service", 0, CLD_EXITED); + test(m, "exec-set-credential-with-mount-namespace.service", 0, CLD_EXITED); + test(m, "exec-set-credential-with-seccomp.service", 0, CLD_EXITED); test(m, "exec-load-credential.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED); + test(m, "exec-load-credential-with-mount-namespace.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED); + test(m, "exec-load-credential-with-seccomp.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED); test(m, "exec-credentials-dir-specifier.service", MANAGER_IS_SYSTEM(m) ? 0 : EXIT_CREDENTIALS, CLD_EXITED); } |