Bind VNC exclusively to IPv4 loopback and test listeners
This commit is contained in:
1 parent
e757978a1a
commit
73b767d807
2 files changed
+4
-1
No files matched your search
@@ -76,6 +76,9 @@ with tempfile.TemporaryDirectory(prefix='oldipmi-test-') as tmp:
|
||||
assert data, 'VNC handshake closed early'
|
||||
received += data
|
||||
assert b'101 Switching Protocols' in received
|
||||
listeners = run('podman', 'exec', cid, 'netstat', '-lntp')
|
||||
vnc_listeners = [line.split()[3] for line in listeners.splitlines() if 'x11vnc' in line]
|
||||
assert vnc_listeners and all(address.startswith('127.0.0.1:') for address in vnc_listeners), listeners
|
||||
status = run('podman', 'exec', cid, 'cat', '/proc/1/status')
|
||||
assert 'NoNewPrivs:\t1' in status and 'CapEff:\t0000000000000000' in status
|
||||
assert run('podman', 'exec', cid, 'id', '-u') != '0'
|
||||
|
||||
Reference in new issue
Block a user