Merge pull request #22926 from bluca/analyze_offline_filter

analyze: fix offline checks for syscall filter and 'native' architecture
2022-04-01 23:43:18 +09:00
parent 356ad32dc2 dd51e725df
commit 37ebfe49de
2 changed files with 10 additions and 7 deletions
@@ -575,14 +575,14 @@ systemd-analyze security --threshold=90 --offline=true \
                           --root=/tmp/img/ testfile.service

 # The strict profile adds a lot of sanboxing options
-systemd-analyze security --threshold=20 --offline=true \
+systemd-analyze security --threshold=25 --offline=true \
                           --security-policy=/tmp/testfile.json \
                           --profile=strict \
                           --root=/tmp/img/ testfile.service

 set +e
 # The trusted profile doesn't add any sanboxing options
-systemd-analyze security --threshold=20 --offline=true \
+systemd-analyze security --threshold=25 --offline=true \
                           --security-policy=/tmp/testfile.json \
                           --profile=/usr/lib/systemd/portable/profile/trusted/service.conf \
                           --root=/tmp/img/ testfile.service \