Drop --map-root-user from the seccomp unshare tests
This commit is contained in:
@@ -3,7 +3,7 @@ use crate::common::*;
|
|||||||
#[test]
|
#[test]
|
||||||
fn seccomp_on_by_default_blocks_unshare() {
|
fn seccomp_on_by_default_blocks_unshare() {
|
||||||
let output = Sandbox::new(&[])
|
let output = Sandbox::new(&[])
|
||||||
.args(["--", "unshare", "--user", "--map-root-user", "/bin/true"])
|
.args(["--", "unshare", "--user", "/bin/true"])
|
||||||
.output()
|
.output()
|
||||||
.expect("agent-sandbox binary failed to execute");
|
.expect("agent-sandbox binary failed to execute");
|
||||||
|
|
||||||
@@ -16,7 +16,7 @@ fn seccomp_on_by_default_blocks_unshare() {
|
|||||||
#[test]
|
#[test]
|
||||||
fn seccomp_off_allows_blocked_syscall() {
|
fn seccomp_off_allows_blocked_syscall() {
|
||||||
let output = Sandbox::new(&["--no-seccomp"])
|
let output = Sandbox::new(&["--no-seccomp"])
|
||||||
.args(["--", "unshare", "--user", "--map-root-user", "/bin/true"])
|
.args(["--", "unshare", "--user", "/bin/true"])
|
||||||
.output()
|
.output()
|
||||||
.expect("agent-sandbox binary failed to execute");
|
.expect("agent-sandbox binary failed to execute");
|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user