diff options
author | Lennart Poettering <lennart@poettering.net> | 2016-10-13 18:36:29 +0200 |
---|---|---|
committer | GitHub <noreply@github.com> | 2016-10-13 18:36:29 +0200 |
commit | 8bfdf29b2492f7df721d20455ee10b2fd158395b (patch) | |
tree | cf83f461afa4925386f5d7467d3480d01c79e5c6 /src/test/test-ns.c | |
parent | f5df066d1d28920e49cf03d5950330138ea4f236 (diff) | |
parent | 4982dbcc300d4599aa6ac143e922d6fbee31a860 (diff) |
Merge pull request #4243 from endocode/djalal/sandbox-first-protection-kernelmodules-v1
core:sandbox: Add ProtectKernelModules= and some fixes
Diffstat (limited to 'src/test/test-ns.c')
-rw-r--r-- | src/test/test-ns.c | 12 |
1 files changed, 9 insertions, 3 deletions
diff --git a/src/test/test-ns.c b/src/test/test-ns.c index c4d4da6d05..da7a8b0565 100644 --- a/src/test/test-ns.c +++ b/src/test/test-ns.c @@ -45,6 +45,14 @@ int main(int argc, char *argv[]) { "/home/lennart/projects", NULL }; + + static const NameSpaceInfo ns_info = { + .private_dev = true, + .protect_control_groups = true, + .protect_kernel_tunables = true, + .protect_kernel_modules = true, + }; + char *root_directory; char *projects_directory; int r; @@ -69,14 +77,12 @@ int main(int argc, char *argv[]) { log_info("Not chrooted"); r = setup_namespace(root_directory, + &ns_info, (char **) writable, (char **) readonly, (char **) inaccessible, tmp_dir, var_tmp_dir, - true, - true, - true, PROTECT_HOME_NO, PROTECT_SYSTEM_NO, 0); |