498 lines
17 KiB
Plaintext
498 lines
17 KiB
Plaintext
# TMPDIR=/mnt/storage/scratch/tmp/EHvgUM HOME=/mnt/storage/scratch/tmp/EHvgUM/home MOSAIC_CONFIG=/mnt/storage/scratch/tmp/EHvgUM/home/.config/mosaic-dev/config.json nice=19
|
|
TAP version 13
|
|
# Subtest: row253 factory socket uses actual config and target-uid query without widening hardening
|
|
ok 1 - row253 factory socket uses actual config and target-uid query without widening hardening
|
|
---
|
|
duration_ms: 320.786952
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 installer refuses unsafe location and query facts before unit writes
|
|
ok 2 - row253 installer refuses unsafe location and query facts before unit writes
|
|
---
|
|
duration_ms: 3259.255387
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 query timeout kills its process group and leaves no running child
|
|
ok 3 - row253 query timeout kills its process group and leaves no running child
|
|
---
|
|
duration_ms: 7050.967328
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 protected homes refuse before any filesystem access
|
|
ok 4 - row253 protected homes refuse before any filesystem access
|
|
---
|
|
duration_ms: 9.235035
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 C4 sleep query has exact inner reason and cleans all members
|
|
ok 5 - row253 C4 sleep query has exact inner reason and cleans all members
|
|
---
|
|
duration_ms: 10728.278487
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 C4 signals query has exact inner reason and cleans all members
|
|
ok 6 - row253 C4 signals query has exact inner reason and cleans all members
|
|
---
|
|
duration_ms: 10727.497398
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 C4 member query has exact inner reason and cleans all members
|
|
ok 7 - row253 C4 member query has exact inner reason and cleans all members
|
|
---
|
|
duration_ms: 10864.916145
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 C4 overflow is output-limit in both sudo modes
|
|
ok 8 - row253 C4 overflow is output-limit in both sudo modes
|
|
---
|
|
duration_ms: 471.505102
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 C4 stalled supervisor uses the outer reason and explicit residual cleanup
|
|
ok 9 - row253 C4 stalled supervisor uses the outer reason and explicit residual cleanup
|
|
---
|
|
duration_ms: 14141.133414
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 C4 inline supervisor is byte-identical in both host scripts
|
|
ok 10 - row253 C4 inline supervisor is byte-identical in both host scripts
|
|
---
|
|
duration_ms: 1.040122
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 C4 cleanup budget starts after inventory pass one
|
|
ok 11 - row253 C4 cleanup budget starts after inventory pass one
|
|
---
|
|
duration_ms: 36.998899
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 query reaps its group even when a child closes stdout before the query returns
|
|
ok 12 - row253 query reaps its group even when a child closes stdout before the query returns
|
|
---
|
|
duration_ms: 128.332368
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 config parser is strict
|
|
ok 13 - row253 config parser is strict
|
|
---
|
|
duration_ms: 8.326775
|
|
type: 'test'
|
|
...
|
|
# Subtest: a clean library render writes both units 0644 with the fixed lines, and enables both then starts the bus then the Console
|
|
ok 14 - a clean library render writes both units 0644 with the fixed lines, and enables both then starts the bus then the Console
|
|
---
|
|
duration_ms: 95.375021
|
|
type: 'test'
|
|
...
|
|
# Subtest: PATH starts with the --node directory, for a node outside the default list and for /usr/bin/node
|
|
ok 15 - PATH starts with the --node directory, for a node outside the default list and for /usr/bin/node
|
|
---
|
|
duration_ms: 107.764189
|
|
type: 'test'
|
|
...
|
|
# Subtest: a failed bus start refuses with the Console not started
|
|
ok 16 - a failed bus start refuses with the Console not started
|
|
---
|
|
duration_ms: 95.26919
|
|
type: 'test'
|
|
...
|
|
# Subtest: the script never links a unit file
|
|
ok 17 - the script never links a unit file
|
|
---
|
|
duration_ms: 0.161935
|
|
type: 'test'
|
|
...
|
|
# Subtest: factory renders --pm once and one MOSAIC_CLAUDE_BIN line, and without them both tokens render empty
|
|
ok 18 - factory renders --pm once and one MOSAIC_CLAUDE_BIN line, and without them both tokens render empty
|
|
---
|
|
duration_ms: 601.778739
|
|
type: 'test'
|
|
...
|
|
# Subtest: a re-install over running units says they are still on the old copy and must restart together, never that it started them
|
|
ok 19 - a re-install over running units says they are still on the old copy and must restart together, never that it started them
|
|
---
|
|
duration_ms: 414.344645
|
|
type: 'test'
|
|
...
|
|
# Subtest: a re-install to another copy re-renders both units, and an edited installed unit refuses
|
|
ok 20 - a re-install to another copy re-renders both units, and an edited installed unit refuses
|
|
---
|
|
duration_ms: 994.134837
|
|
type: 'test'
|
|
...
|
|
# Subtest: a template with a namespace, user or system call restriction refuses
|
|
ok 21 - a template with a namespace, user or system call restriction refuses
|
|
---
|
|
duration_ms: 263.798116
|
|
type: 'test'
|
|
...
|
|
# Subtest: the bus template's EnvironmentFile line must be there and point at the session env, and the Console template must have none
|
|
ok 22 - the bus template's EnvironmentFile line must be there and point at the session env, and the Console template must have none
|
|
---
|
|
duration_ms: 181.439557
|
|
type: 'test'
|
|
...
|
|
# Subtest: a template holding an unknown token, PermissionsStartOnly or a privileged Exec prefix refuses
|
|
ok 23 - a template holding an unknown token, PermissionsStartOnly or a privileged Exec prefix refuses
|
|
---
|
|
duration_ms: 138.913066
|
|
type: 'test'
|
|
...
|
|
# Subtest: a symlink at either unit path refuses
|
|
ok 24 - a symlink at either unit path refuses
|
|
---
|
|
duration_ms: 167.097448
|
|
type: 'test'
|
|
...
|
|
# Subtest: a --node that is relative, not root-owned or under <home> refuses
|
|
ok 25 - a --node that is relative, not root-owned or under <home> refuses
|
|
---
|
|
duration_ms: 18.382732
|
|
type: 'test'
|
|
...
|
|
# Subtest: a re-install with a different --node or different serve flags refuses
|
|
ok 26 - a re-install with a different --node or different serve flags refuses
|
|
---
|
|
duration_ms: 476.601285
|
|
type: 'test'
|
|
...
|
|
# Subtest: an installed pair whose units name different copies refuses
|
|
ok 27 - an installed pair whose units name different copies refuses
|
|
---
|
|
duration_ms: 244.045399
|
|
type: 'test'
|
|
...
|
|
# Subtest: a copy id that is short, uppercase, holds / or .., or names no directory refuses
|
|
ok 28 - a copy id that is short, uppercase, holds / or .., or names no directory refuses
|
|
---
|
|
duration_ms: 28.577084
|
|
type: 'test'
|
|
...
|
|
# Subtest: library refuses a privileged-floor miss, a bad proof pair and every flag outside its set
|
|
ok 29 - library refuses a privileged-floor miss, a bad proof pair and every flag outside its set
|
|
---
|
|
duration_ms: 270.700937
|
|
type: 'test'
|
|
...
|
|
# Subtest: library refuses a proof file not owned by <user>'s uid
|
|
ok 30 - library refuses a proof file not owned by <user>'s uid
|
|
---
|
|
duration_ms: 15.926859
|
|
type: 'test'
|
|
...
|
|
# Subtest: factory refuses duplicate socket, a missing --port or --business, and each proxy flag
|
|
ok 31 - factory refuses duplicate socket, a missing --port or --business, and each proxy flag
|
|
---
|
|
duration_ms: 178.797946
|
|
type: 'test'
|
|
...
|
|
# Subtest: row253 factory refuses retired TCP and a value after the socket marker
|
|
ok 32 - row253 factory refuses retired TCP and a value after the socket marker
|
|
---
|
|
duration_ms: 26.729147
|
|
type: 'test'
|
|
...
|
|
# Subtest: factory refuses a --claude that is relative, not root-owned or under <home>, and a re-install with another --pm or --claude
|
|
ok 33 - factory refuses a --claude that is relative, not root-owned or under <home>, and a re-install with another --pm or --claude
|
|
---
|
|
duration_ms: 1287.523935
|
|
type: 'test'
|
|
...
|
|
# Subtest: the precheck passes on a good host and prints free memory, without the key
|
|
ok 34 - the precheck passes on a good host and prints free memory, without the key
|
|
---
|
|
duration_ms: 165.265761
|
|
type: 'test'
|
|
...
|
|
# Subtest: the precheck refuses each failed host check
|
|
ok 35 - the precheck refuses each failed host check
|
|
---
|
|
duration_ms: 1355.479314
|
|
type: 'test'
|
|
...
|
|
# Subtest: the precheck refuses a user missing from passwd, a business file that does not load, and a symlinked run root
|
|
ok 36 - the precheck refuses a user missing from passwd, a business file that does not load, and a symlinked run root
|
|
---
|
|
duration_ms: 749.037298
|
|
type: 'test'
|
|
...
|
|
# Subtest: a bwrap that fails refuses and prints the sysctl and where bwrap is
|
|
ok 37 - a bwrap that fails refuses and prints the sysctl and where bwrap is
|
|
---
|
|
duration_ms: 158.018943
|
|
type: 'test'
|
|
...
|
|
# Subtest: an unprivileged port floor at or below the Console's port refuses, and so does a missing Console unit
|
|
ok 38 - an unprivileged port floor at or below the Console's port refuses, and so does a missing Console unit
|
|
---
|
|
duration_ms: 775.768583
|
|
type: 'test'
|
|
...
|
|
# Subtest: bus.tester: library refuses it on, factory needs it on, and factory refuses a library business
|
|
ok 39 - bus.tester: library refuses it on, factory needs it on, and factory refuses a library business
|
|
---
|
|
duration_ms: 591.243454
|
|
type: 'test'
|
|
...
|
|
# Subtest: the claude check runs only for a claude-code instance, and refuses a claude that appends or answers wrong
|
|
ok 40 - the claude check runs only for a claude-code instance, and refuses a claude that appends or answers wrong
|
|
---
|
|
duration_ms: 1192.916891
|
|
type: 'test'
|
|
...
|
|
# Subtest: the claude check runs the bus unit's MOSAIC_CLAUDE_BIN over claude on PATH
|
|
ok 41 - the claude check runs the bus unit's MOSAIC_CLAUDE_BIN over claude on PATH
|
|
---
|
|
duration_ms: 380.298256
|
|
type: 'test'
|
|
...
|
|
# Subtest: the session env file refuses when missing, open to others, a symlink, empty, or emptied by a later line
|
|
ok 42 - the session env file refuses when missing, open to others, a symlink, empty, or emptied by a later line
|
|
---
|
|
duration_ms: 944.757771
|
|
type: 'test'
|
|
...
|
|
# Subtest: inside a session's sandbox a bind below 1024 fails with EACCES, and a bind on a free high port succeeds
|
|
ok 43 - inside a session's sandbox a bind below 1024 fails with EACCES, and a bind on a free high port succeeds
|
|
---
|
|
duration_ms: 94.761095
|
|
type: 'test'
|
|
...
|
|
# Subtest: Vikunja 614 factory: scoped @anthropic-ai Claude path renders and passes installed read-back
|
|
ok 44 - Vikunja 614 factory: scoped @anthropic-ai Claude path renders and passes installed read-back
|
|
---
|
|
duration_ms: 804.156726
|
|
type: 'test'
|
|
...
|
|
# Subtest: Vikunja 614 factory: plain paths still refuse every named unsafe character
|
|
ok 45 - Vikunja 614 factory: plain paths still refuse every named unsafe character
|
|
---
|
|
duration_ms: 87.565396
|
|
type: 'test'
|
|
...
|
|
# Subtest: Vikunja 614 precheck: explicit null and named notifier decisions pass
|
|
ok 46 - Vikunja 614 precheck: explicit null and named notifier decisions pass
|
|
---
|
|
duration_ms: 305.744175
|
|
type: 'test'
|
|
...
|
|
# Subtest: Vikunja 614 precheck: notifier config refuses missing, public, malformed and extra-key decisions
|
|
ok 47 - Vikunja 614 precheck: notifier config refuses missing, public, malformed and extra-key decisions
|
|
---
|
|
duration_ms: 1300.724491
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 no-proxy renders stay byte-identical to the pre-row renderer
|
|
ok 48 - row334 no-proxy renders stay byte-identical to the pre-row renderer
|
|
---
|
|
duration_ms: 257.734638
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy uses P1 runner, bus dependencies and proxy bus Console start order
|
|
ok 49 - row334 proxy uses P1 runner, bus dependencies and proxy bus Console start order
|
|
---
|
|
duration_ms: 137.176987
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses continuation by message before writing
|
|
ok 50 - row334 proxy refuses continuation by message before writing
|
|
---
|
|
duration_ms: 90.060095
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses not-setting by message before writing
|
|
ok 51 - row334 proxy refuses not-setting by message before writing
|
|
---
|
|
duration_ms: 93.993348
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses RestrictNamespaces by message before writing
|
|
ok 52 - row334 proxy refuses RestrictNamespaces by message before writing
|
|
---
|
|
duration_ms: 93.341838
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses PrivateUsers by message before writing
|
|
ok 53 - row334 proxy refuses PrivateUsers by message before writing
|
|
---
|
|
duration_ms: 94.764023
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses SystemCallFilter by message before writing
|
|
ok 54 - row334 proxy refuses SystemCallFilter by message before writing
|
|
---
|
|
duration_ms: 94.826317
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses PermissionsStartOnly by message before writing
|
|
ok 55 - row334 proxy refuses PermissionsStartOnly by message before writing
|
|
---
|
|
duration_ms: 96.116509
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses EnvironmentFile by message before writing
|
|
ok 56 - row334 proxy refuses EnvironmentFile by message before writing
|
|
---
|
|
duration_ms: 119.193391
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses AmbientCapabilities by message before writing
|
|
ok 57 - row334 proxy refuses AmbientCapabilities by message before writing
|
|
---
|
|
duration_ms: 116.325629
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses CapabilityBoundingSet by message before writing
|
|
ok 58 - row334 proxy refuses CapabilityBoundingSet by message before writing
|
|
---
|
|
duration_ms: 117.596342
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses privileged by message before writing
|
|
ok 59 - row334 proxy refuses privileged by message before writing
|
|
---
|
|
duration_ms: 98.105075
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses direct-binary by message before writing
|
|
ok 60 - row334 proxy refuses direct-binary by message before writing
|
|
---
|
|
duration_ms: 114.60378
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses nnp by message before writing
|
|
ok 61 - row334 proxy refuses nnp by message before writing
|
|
---
|
|
duration_ms: 103.113825
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses cwd by message before writing
|
|
ok 62 - row334 proxy refuses cwd by message before writing
|
|
---
|
|
duration_ms: 102.872946
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses environment by message before writing
|
|
ok 63 - row334 proxy refuses environment by message before writing
|
|
---
|
|
duration_ms: 104.833099
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses install by message before writing
|
|
ok 64 - row334 proxy refuses install by message before writing
|
|
---
|
|
duration_ms: 113.150594
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses user by message before writing
|
|
ok 65 - row334 proxy refuses user by message before writing
|
|
---
|
|
duration_ms: 99.6967
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses group by message before writing
|
|
ok 66 - row334 proxy refuses group by message before writing
|
|
---
|
|
duration_ms: 100.919966
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses ProtectSystem by message before writing
|
|
ok 67 - row334 proxy refuses ProtectSystem by message before writing
|
|
---
|
|
duration_ms: 105.543055
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses ReadWritePaths by message before writing
|
|
ok 68 - row334 proxy refuses ReadWritePaths by message before writing
|
|
---
|
|
duration_ms: 107.705639
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses ProtectHome by message before writing
|
|
ok 69 - row334 proxy refuses ProtectHome by message before writing
|
|
---
|
|
duration_ms: 107.590511
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses PrivateTmp by message before writing
|
|
ok 70 - row334 proxy refuses PrivateTmp by message before writing
|
|
---
|
|
duration_ms: 109.894567
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy refuses token by message before writing
|
|
ok 71 - row334 proxy refuses token by message before writing
|
|
---
|
|
duration_ms: 85.918305
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy template missing or symlink refuses
|
|
ok 72 - row334 proxy template missing or symlink refuses
|
|
---
|
|
duration_ms: 167.940142
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 rendered ExecStart refuses wrong PIN and missing proxy with P1 status
|
|
ok 73 - row334 rendered ExecStart refuses wrong PIN and missing proxy with P1 status
|
|
---
|
|
duration_ms: 306.45812
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 reinstall repins all three and refuses a proxy copy mismatch
|
|
ok 74 - row334 reinstall repins all three and refuses a proxy copy mismatch
|
|
---
|
|
duration_ms: 580.756121
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 installed proxy without --proxy refuses and preserves all bytes
|
|
ok 75 - row334 installed proxy without --proxy refuses and preserves all bytes
|
|
---
|
|
duration_ms: 217.139684
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 dangling proxy symlink without flag refuses without deleting
|
|
ok 76 - row334 dangling proxy symlink without flag refuses without deleting
|
|
---
|
|
duration_ms: 115.14093
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 active proxy reports old copy and all three must restart together
|
|
ok 77 - row334 active proxy reports old copy and all three must restart together
|
|
---
|
|
duration_ms: 367.168744
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 failed mosaic-proxy.service start leaves later units unstarted
|
|
ok 78 - row334 failed mosaic-proxy.service start leaves later units unstarted
|
|
---
|
|
duration_ms: 138.123277
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 failed [email protected] start leaves later units unstarted
|
|
ok 79 - row334 failed [email protected] start leaves later units unstarted
|
|
---
|
|
duration_ms: 132.720562
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 installed proxy enforces hardening order and remaining common refusals
|
|
ok 80 - row334 installed proxy enforces hardening order and remaining common refusals
|
|
---
|
|
duration_ms: 667.650113
|
|
type: 'test'
|
|
...
|
|
# Subtest: row334 proxy installed path rejects symlink and non-regular file
|
|
ok 81 - row334 proxy installed path rejects symlink and non-regular file
|
|
---
|
|
duration_ms: 239.721676
|
|
type: 'test'
|
|
...
|
|
1..81
|
|
# tests 81
|
|
# suites 0
|
|
# pass 81
|
|
# fail 0
|
|
# cancelled 0
|
|
# skipped 0
|
|
# todo 0
|
|
# duration_ms 78022.489026
|