Function TEST_F

src/tests/containerizer/linux_seccomp_parser_tests.cpp:38–153

This test verifies that the Seccomp parser can parse a valid Seccomp profile.

// This test verifies that the Seccomp parser can parse a valid Seccomp profile.
TEST_F(SeccompParserTest, SECCOMP_ParseSeccompProfile)
{
  const string config =
    R"~(
    {
      "defaultAction": "SCMP_ACT_ERRNO",
      "archMap": [
        {
          "architecture": "SCMP_ARCH_X86_64",
          "subArchitectures": [
            "SCMP_ARCH_X86",
            "SCMP_ARCH_X32"
          ]
        },
        {
          "architecture": "SCMP_ARCH_AARCH64",
          "subArchitectures": [
            "SCMP_ARCH_ARM"
          ]
        }
      ],
      "syscalls": [
        {
          "names": [
            "accept",
            "writev"
          ],
          "action": "SCMP_ACT_ALLOW",
          "args": [],
          "comment": "",
          "includes": {},
          "excludes": {}
        },
        {
          "names": [
            "clone"
          ],
          "action": "SCMP_ACT_ALLOW",
          "args": [
            {
              "index": 0,
              "value": 2080505856,
              "valueTwo": 0,
              "op": "SCMP_CMP_MASKED_EQ"
            }
          ],
          "comment": "",
          "includes": {},
          "excludes": {
            "caps": [
              "CAP_SYS_ADMIN"
            ],
            "arches": [
              "s390",
              "s390x"
            ]
          }
        }