diff options
author | OpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com> | 2020-06-29 05:01:56 -0400 |
---|---|---|
committer | GitHub <noreply@github.com> | 2020-06-29 05:01:56 -0400 |
commit | 771c887010709cdf718be252ca91a852c6735da7 (patch) | |
tree | 5528df7fad19ca4ae00f8774a4d01a94c0662764 /test/system/410-selinux.bats | |
parent | cbae41f75f97372f0c8f713c523b96a7feeabd51 (diff) | |
parent | f4643ac02a6a9e343ad1704599479e84f13d3160 (diff) | |
download | podman-771c887010709cdf718be252ca91a852c6735da7.tar.gz podman-771c887010709cdf718be252ca91a852c6735da7.tar.bz2 podman-771c887010709cdf718be252ca91a852c6735da7.zip |
Merge pull request #6783 from edsantiago/bats
system tests: add pod, inspect testing
Diffstat (limited to 'test/system/410-selinux.bats')
-rw-r--r-- | test/system/410-selinux.bats | 19 |
1 files changed, 19 insertions, 0 deletions
diff --git a/test/system/410-selinux.bats b/test/system/410-selinux.bats index 8a0477eff..1769730f0 100644 --- a/test/system/410-selinux.bats +++ b/test/system/410-selinux.bats @@ -63,4 +63,23 @@ function check_label() { check_label "--security-opt label=level:s0:c1,c2" "container_t" "s0:c1,c2" } +# pr #6752 +@test "podman selinux: inspect multiple labels" { + if [ ! -e /usr/sbin/selinuxenabled ] || ! /usr/sbin/selinuxenabled; then + skip "selinux disabled or not available" + fi + + run_podman run -d --name myc \ + --security-opt seccomp=unconfined \ + --security-opt label=type:spc_t \ + --security-opt label=level:s0 \ + $IMAGE sh -c 'while test ! -e /stop; do sleep 0.1; done' + run_podman inspect --format='{{ .HostConfig.SecurityOpt }}' myc + is "$output" "\[label=type:spc_t,label=level:s0 seccomp=unconfined]" \ + "'podman inspect' preserves all --security-opts" + + run_podman exec myc touch /stop + run_podman rm -f myc +} + # vim: filetype=sh |