diff options
| author | Joachim Fasting <joachifm@fastmail.fm> | 2017-04-30 14:41:56 +0200 |
|---|---|---|
| committer | Joachim Fasting <joachifm@fastmail.fm> | 2017-04-30 15:17:27 +0200 |
| commit | a1678269f93d40f334798fb166956733f528d70d (patch) | |
| tree | 902d74a96f77e2ea98b4fa3f07e843fe3d3ad453 /nixos/tests/hardened.nix | |
| parent | 86fe3e9c6e7fe35f4db20446ce425e9cb8cf5d13 (diff) | |
| download | nixpkgs-a1678269f93d40f334798fb166956733f528d70d.tar nixpkgs-a1678269f93d40f334798fb166956733f528d70d.tar.gz nixpkgs-a1678269f93d40f334798fb166956733f528d70d.tar.bz2 nixpkgs-a1678269f93d40f334798fb166956733f528d70d.tar.lz nixpkgs-a1678269f93d40f334798fb166956733f528d70d.tar.xz nixpkgs-a1678269f93d40f334798fb166956733f528d70d.tar.zst nixpkgs-a1678269f93d40f334798fb166956733f528d70d.zip | |
nixos/hardened profile: disable user namespaces at runtime
Diffstat (limited to 'nixos/tests/hardened.nix')
| -rw-r--r-- | nixos/tests/hardened.nix | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/nixos/tests/hardened.nix b/nixos/tests/hardened.nix index 389d7ed7ffa..1d9a9043e03 100644 --- a/nixos/tests/hardened.nix +++ b/nixos/tests/hardened.nix @@ -27,5 +27,10 @@ import ./make-test.nix ({ pkgs, ...} : { # note: this better a be module we normally wouldn't load ... $machine->fail("modprobe dccp"); }; + + # Test userns + subtest "userns", sub { + $machine->fail("unshare --user"); + }; ''; }) |