Skip to content

Commit a5e660c

Browse files
committed
seccomp-notify.bats: add fcntl to the important syscall list
For issue 4328 Signed-off-by: Akihiro Suda <[email protected]>
1 parent e784848 commit a5e660c

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

tests/integration/seccomp-notify.bats

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -83,16 +83,17 @@ function scmp_act_notify_template() {
8383
}
8484

8585
# Test important syscalls (some might be executed by runc) work fine when handled by the agent. noNewPrivileges FALSE.
86+
# fcntl: https://github.com/opencontainers/runc/issues/4328
8687
@test "runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges false)" {
87-
scmp_act_notify_template "/bin/true" false '"execve","openat","open","read","close"'
88+
scmp_act_notify_template "/bin/true" false '"execve","openat","open","read","close","fcntl"'
8889

8990
runc run test_busybox
9091
[ "$status" -eq 0 ]
9192
}
9293

9394
# Test important syscalls (some might be executed by runc) work fine when handled by the agent. noNewPrivileges TRUE.
9495
@test "runc run [seccomp] (SCMP_ACT_NOTIFY important syscalls noNewPrivileges true)" {
95-
scmp_act_notify_template "/bin/true" true '"execve","openat","open","read","close"'
96+
scmp_act_notify_template "/bin/true" true '"execve","openat","open","read","close","fcntl"'
9697

9798
runc run test_busybox
9899
[ "$status" -eq 0 ]

0 commit comments

Comments
 (0)