summaryrefslogtreecommitdiff
path: root/test
diff options
context:
space:
mode:
authorOpenShift Merge Robot <openshift-merge-robot@users.noreply.github.com>2022-02-02 08:52:42 -0500
committerGitHub <noreply@github.com>2022-02-02 08:52:42 -0500
commitc2d0011b723428c622b99cf633439f84c4bf901a (patch)
tree814fa33be901babc6e5f180763ea54471af0fdfe /test
parent681f76e8b0e6388e0b4c7426deccf0b31d12b75b (diff)
parentc4dfd004ad7efedb48ffa239e65bc9cdcfa31ed2 (diff)
downloadpodman-c2d0011b723428c622b99cf633439f84c4bf901a.tar.gz
podman-c2d0011b723428c622b99cf633439f84c4bf901a.tar.bz2
podman-c2d0011b723428c622b99cf633439f84c4bf901a.zip
Merge pull request #13110 from giuseppe/enforce-dev-shm-with-noexec-nosuid-nodev
libpod: enforce noexec,nosuid,nodev for /dev/shm
Diffstat (limited to 'test')
-rw-r--r--test/e2e/run_test.go10
1 files changed, 10 insertions, 0 deletions
diff --git a/test/e2e/run_test.go b/test/e2e/run_test.go
index 62a454e29..91a2eddad 100644
--- a/test/e2e/run_test.go
+++ b/test/e2e/run_test.go
@@ -1926,4 +1926,14 @@ WORKDIR /madethis`, BB)
Expect(session).Should(Exit(0))
Expect(session.OutputToString()).To(ContainSubstring("i686"))
})
+
+ It("podman run /dev/shm has nosuid,noexec,nodev", func() {
+ session := podmanTest.Podman([]string{"run", ALPINE, "grep", "/dev/shm", "/proc/self/mountinfo"})
+ session.WaitWithDefaultTimeout()
+ Expect(session).Should(Exit(0))
+ output := session.OutputToString()
+ Expect(output).To(ContainSubstring("nosuid"))
+ Expect(output).To(ContainSubstring("noexec"))
+ Expect(output).To(ContainSubstring("nodev"))
+ })
})