mirror of
https://github.com/netblue30/firejail.git
synced 2026-05-16 06:06:03 -06:00
7e91a0414c
They are taking longer than the 30s timeout[1] [2]:
runner@fv-az246-621:~/work/firejail/firejail/test/sysutils$
<ysutils$ firejail --ignore=quiet wget -q debian.org
Reading profile /etc/firejail/wget.profile
[...]
Child process initialized in 115.54 ms
TESTING ERROR 2
runner@fv-az1234-541:~/work/firejail/firejail/test/utils$
<irejail --build wget --output-document=~ debian.org
[...]
Resolving www.debian.org (www.debian.org)... 128.31.0.62
Connecting to www.debian.org (www.debian.org)|128.31.0.62|:443... connected.
TESTING ERROR 13
[1] https://github.com/kmk3/firejail/actions/runs/6005119423/job/16287436840
[2] https://github.com/kmk3/firejail/actions/runs/6005314148/job/16287794321
112 lines
2.1 KiB
Text
Executable file
112 lines
2.1 KiB
Text
Executable file
#!/usr/bin/expect -f
|
|
# This file is part of Firejail project
|
|
# Copyright (C) 2014-2023 Firejail Authors
|
|
# License GPL v2
|
|
|
|
set timeout 10
|
|
spawn $env(SHELL)
|
|
match_max 100000
|
|
|
|
send -- "echo testing > ~/_firejail-test-file\r"
|
|
after 100
|
|
|
|
send -- "firejail --build cat ~/_firejail-test-file\r"
|
|
expect {
|
|
timeout {puts "TESTING ERROR 0\n";exit}
|
|
"whitelist $\{HOME\}/_firejail-test-file"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 1\n";exit}
|
|
"include whitelist-common.inc"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 2\n";exit}
|
|
"include whitelist-usr-share-common.inc"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 3\n";exit}
|
|
"include whitelist-var-common.inc"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 4\n";exit}
|
|
"caps.drop all"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 5\n";exit}
|
|
"ipc-namespace"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 6\n";exit}
|
|
"netfilter"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 7\n";exit}
|
|
"nonewprivs"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 8\n";exit}
|
|
"noroot"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 9\n";exit}
|
|
"net none"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 10\n";exit}
|
|
"seccomp"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 11\n";exit}
|
|
"private-bin cat,"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 12\n";exit}
|
|
"private-dev"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 13\n";exit}
|
|
"private-etc none"
|
|
}
|
|
expect {
|
|
timeout {puts "TESTING ERROR 14\n";exit}
|
|
"private-tmp"
|
|
}
|
|
after 100
|
|
|
|
send -- "rm -f ~/_firejail-test-file\r"
|
|
after 100
|
|
|
|
send -- "firejail --build cat /etc/passwd\r"
|
|
expect {
|
|
timeout {puts "TESTING ERROR 10\n";exit}
|
|
"private-etc passwd,"
|
|
}
|
|
after 100
|
|
|
|
send -- "rm firejail-test-file-4388\r"
|
|
after 100
|
|
send -- "firejail --build=firejail-test-file-4388 cat /etc/passwd\r"
|
|
after 100
|
|
send -- "cat firejail-test-file-4388\r"
|
|
expect {
|
|
timeout {puts "TESTING ERROR 10.1\n";exit}
|
|
"private-etc passwd,"
|
|
}
|
|
after 100
|
|
|
|
# increase the timeout for remote services
|
|
set timeout 30
|
|
|
|
# FIXME: Broken in CI
|
|
#send -- "firejail --build wget --output-document=~ debian.org\r"
|
|
#expect {
|
|
# timeout {puts "TESTING ERROR 13\n";exit}
|
|
# "protocol"
|
|
#}
|
|
#expect {
|
|
# timeout {puts "TESTING ERROR 13.1\n";exit}
|
|
# "inet"
|
|
#}
|
|
#after 100
|
|
|
|
puts "all done\n"
|