diff options
author | Frantisek Sumsal <frantisek@sumsal.cz> | 2023-05-15 09:00:17 +0200 |
---|---|---|
committer | Frantisek Sumsal <frantisek@sumsal.cz> | 2023-05-15 09:00:17 +0200 |
commit | 1c8bf49b67a56d240912f10e7294a066674278c9 (patch) | |
tree | d4c9e5b75acb1a786551db21f5738f10b06955f2 /test | |
parent | 62281c78bb0ef77dafb2cad14c1216c313417a23 (diff) | |
download | systemd-1c8bf49b67a56d240912f10e7294a066674278c9.tar.gz |
test: update nspawn's basic config file used for fuzzing
Diffstat (limited to 'test')
-rw-r--r-- | test/fuzz/fuzz-nspawn-settings/basic-config | 35 |
1 files changed, 32 insertions, 3 deletions
diff --git a/test/fuzz/fuzz-nspawn-settings/basic-config b/test/fuzz/fuzz-nspawn-settings/basic-config index be0d4e7c7b..abc8b20d3d 100644 --- a/test/fuzz/fuzz-nspawn-settings/basic-config +++ b/test/fuzz/fuzz-nspawn-settings/basic-config @@ -1,6 +1,7 @@ [Exec] Boot=off ProcessTwo=off +Ephemeral=yes Parameters=/sbin/init -x=1 Environment=THIS=that User=user @@ -8,28 +9,56 @@ WorkingDirectory=/cwd PivotRoot=/newroot Capability=CAP_NET DropCapability=CAP_ADMIN +AmbientCapability=CAP_SETUID +NoNewPrivileges=yes KillSignal=SIGTERM Personality=shy MachineID=edbfea3309ba41ea83e2318c58a8d498 -PrivateUser=1:2 +PrivateUsers=1:2 NotifyReady=no SystemCallFilters=write +LimitCPU=10:20 +LimitFSIZE=5:10 +LimitDATA=100:200 +LimitSTACK=1024:2048 +LimitCore=0:1024 +LimitRSS=1024:4096 +LimitNOFILE=5:15 +LimitAS=2048:4096 +LimitNPROC=32:64 +LimitMEMLOCK=128:256 +LimitLOCKS=100:300 +LimitSIGPENDING=1:3 +LimitMSGQUEUE=16:32 +LimitNICE=4:5 +LimitRTPRIO=0:1 +LimitRTTIME=2:3 +OOMScoreAdjust=50 +CPUAffinity=1,2,3-4 +Hostname=foo.bar +ResolvConf=copy-host +Timezone=bind +LinkJournal=try-guest +SuppressSync=yes [Files] ReadOnly=no Volatile=no Bind=/bindthis BindReadOnly=/bindthisro +BindUser=testuser TemporaryFileSystem=/thisismytmpfs:rw +Inaccessible=yes Overlay=/thisisanoverlay:/thisisanoverlaytoo -PrivateUsersChown=no +OverlayReadOnly=/foo:/bar:/baz:/merged +PrivateUsersOwnership=no [Network] Private=off VirtualEthernet=yes VirtualEthernetExtra=veth1:veth2 Interface=eth1 enp0s1 -MacVLAN=eno1 eno2 +MACVLAN=eno1 eno2 IPVLAN=eno3 enp2s124 Bridge=bridge123 bridge125 Zone=myzone |