mirror of
https://github.com/containers/podman.git
synced 2025-10-15 10:16:28 +08:00
5a2098cf61
unconfined is a special value and not a path as such it must not be
converted otherwise --security-opt seccomp=unconfined fails as it tries
to access a file called unconfined.
Fixes: 3e8b2d7d96 ("Fix seccomp profile path on Windows")
Fixes: #26855
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
55 lines
1.3 KiB
Go
55 lines
1.3 KiB
Go
//go:build windows
|
|
|
|
package specgenutil
|
|
|
|
import (
|
|
"os"
|
|
"testing"
|
|
|
|
"github.com/containers/podman/v5/pkg/domain/entities"
|
|
"github.com/containers/podman/v5/pkg/specgen"
|
|
"github.com/stretchr/testify/assert"
|
|
)
|
|
|
|
func TestSeccompProfilePath(t *testing.T) {
|
|
cwd, err := os.Getwd()
|
|
assert.NoError(t, err)
|
|
cwd_wsl, err := specgen.ConvertWinMountPath(cwd)
|
|
assert.NoError(t, err)
|
|
|
|
tests := []struct {
|
|
originalPath string
|
|
expectedPath string
|
|
}{
|
|
{`C:\Foo`, "/mnt/c/Foo"},
|
|
{`C:\Foo`, "/mnt/c/Foo"},
|
|
{`\\?\C:\Foo`, "/mnt/c/Foo"},
|
|
{`/c/bar`, "/mnt/c/bar"},
|
|
{`/c/bar`, "/mnt/c/bar"},
|
|
{`/mnt/c/bar`, "/mnt/c/bar"},
|
|
{`/test/this`, "/test/this"},
|
|
{`c:/bar/something`, "/mnt/c/bar/something"},
|
|
{`c`, cwd_wsl + "/c"},
|
|
{`\\computer\loc`, `\\computer\loc`},
|
|
{`\\.\drive\loc`, "/mnt/wsl/drive/loc"},
|
|
{"unconfined", "unconfined"},
|
|
}
|
|
|
|
f := func(secopt string) (*specgen.SpecGenerator, error) {
|
|
sg := specgen.NewSpecGenerator("nothing", false)
|
|
err := FillOutSpecGen(sg, &entities.ContainerCreateOptions{
|
|
SecurityOpt: []string{secopt}}, []string{},
|
|
)
|
|
return sg, err
|
|
}
|
|
|
|
for _, test := range tests {
|
|
t.Run(test.originalPath, func(t *testing.T) {
|
|
msg := "Checking: " + test.originalPath
|
|
sg, err := f("seccomp=" + test.originalPath)
|
|
assert.NoError(t, err, msg)
|
|
assert.Equal(t, test.expectedPath, sg.SeccompProfilePath, msg)
|
|
})
|
|
}
|
|
}
|