mirror of
https://github.com/morgan9e/systemd
synced 2026-04-14 00:14:32 +09:00
test: Add failing/non-failing syscall filter test setting architecture
This adds a high level test verifying that syscall filtering in combination with a simple architecture filter for the "native" architecture works fine.
This commit is contained in:
committed by
Yu Watanabe
parent
08bf703cc1
commit
e975a94559
9
test/test-execute/exec-systemcallfilter-failing3.service
Normal file
9
test/test-execute/exec-systemcallfilter-failing3.service
Normal file
@@ -0,0 +1,9 @@
|
||||
[Unit]
|
||||
Description=Test for SystemCallFilter
|
||||
|
||||
[Service]
|
||||
ExecStart=/bin/sh -c '/bin/echo "This should not be seen"'
|
||||
Type=oneshot
|
||||
LimitCORE=0
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=~write open execve fexecve execveat exit_group close mmap munmap fstat DONOTEXIST
|
||||
@@ -0,0 +1,8 @@
|
||||
[Unit]
|
||||
Description=Test for SystemCallFilter
|
||||
|
||||
[Service]
|
||||
ExecStart=/bin/sh -c 'echo "Foo bar"'
|
||||
Type=oneshot
|
||||
SystemCallArchitectures=native
|
||||
SystemCallFilter=
|
||||
Reference in New Issue
Block a user