colin/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/tests: expand hardened tests

Browse Source
This commit is contained in:
Joachim Fasting 2017-09-16 11:46:26 +02:00
parent 62fa45eac5
commit 586d04c588
No known key found for this signature in database
GPG Key ID: 66EAB6B14F6B6E0D
1 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
nixos/tests/hardened.nix
View File

@ -32,5 +32,15 @@ import ./make-test.nix ({ pkgs, ...} : {
subtest "userns", sub {
$machine->fail("unshare --user");
};
# Test dmesg restriction
subtest "dmesg", sub {
$machine->fail("su -l alice -c dmesg");
};
# Test access to kcore
subtest "kcore", sub {
$machine->fail("cat /proc/kcore");
};
'';
})