Tests: default tmpfs in rootfs.

This commit is contained in:
Tiago Natel de Moura
2020-08-20 15:53:20 +01:00
parent 4ad8c5b898
commit 10738c3fe2

View File

@@ -327,6 +327,26 @@ class TestGoIsolation(TestApplicationGo):
obj = self.getjson(url='/?file=/bin/sh')['body'] obj = self.getjson(url='/?file=/bin/sh')['body']
self.assertEqual(obj['FileExists'], False, 'file should not exists') self.assertEqual(obj['FileExists'], False, 'file should not exists')
def test_go_isolation_rootfs_default_tmpfs(self):
if not self.isolation_key('unprivileged_userns_clone'):
print('unprivileged clone is not available')
raise unittest.SkipTest()
if not self.isolation_key('mnt'):
print('mnt namespace is not supported')
raise unittest.SkipTest()
isolation = {
'namespaces': {'mount': True, 'credential': True},
'rootfs': self.testdir,
}
self.load('ns_inspect', isolation=isolation)
obj = self.getjson(url='/?file=/tmp')['body']
self.assertEqual(obj['FileExists'], True, 'app has /tmp')
if __name__ == '__main__': if __name__ == '__main__':
TestGoIsolation.main() TestGoIsolation.main()