mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-08-31 14:25:52 +00:00
Update current mount tests to reflect how they should behave with mount rules
Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
@@ -66,10 +66,9 @@ runchecktest "UMOUNT (unconfined)" pass umount ${loop_device} ${mount_point}
|
||||
genprofile
|
||||
runchecktest "MOUNT (confined)" fail mount ${loop_device} ${mount_point}
|
||||
|
||||
# TEST A3. confine MOUNT - cap sys_admin allows mount
|
||||
|
||||
# TEST A3. confine MOUNT - cap sys_admin is not sufficient to mount
|
||||
genprofile capability:sys_admin
|
||||
runchecktest "MOUNT (confined)" pass mount ${loop_device} ${mount_point}
|
||||
runchecktest "MOUNT (confined)" fail mount ${loop_device} ${mount_point}
|
||||
|
||||
/bin/umount -text2 ${mount_point}
|
||||
|
||||
|
Reference in New Issue
Block a user