mirror of
https://gitlab.com/apparmor/apparmor
synced 2025-09-01 14:55:10 +00:00
Update current mount tests to reflect how they should behave with mount rules
Signed-off-by: John Johansen <john.johansen@canonical.com>
This commit is contained in:
@@ -66,10 +66,9 @@ runchecktest "UMOUNT (unconfined)" pass umount ${loop_device} ${mount_point}
|
|||||||
genprofile
|
genprofile
|
||||||
runchecktest "MOUNT (confined)" fail mount ${loop_device} ${mount_point}
|
runchecktest "MOUNT (confined)" fail mount ${loop_device} ${mount_point}
|
||||||
|
|
||||||
# TEST A3. confine MOUNT - cap sys_admin allows mount
|
# TEST A3. confine MOUNT - cap sys_admin is not sufficient to mount
|
||||||
|
|
||||||
genprofile capability:sys_admin
|
genprofile capability:sys_admin
|
||||||
runchecktest "MOUNT (confined)" pass mount ${loop_device} ${mount_point}
|
runchecktest "MOUNT (confined)" fail mount ${loop_device} ${mount_point}
|
||||||
|
|
||||||
/bin/umount -text2 ${mount_point}
|
/bin/umount -text2 ${mount_point}
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user