diff --git a/crates/openshell-sandbox-backend/src/audit.rs b/crates/openshell-sandbox-backend/src/audit.rs index 59f6ba1dc..1751ce5ab 100644 --- a/crates/openshell-sandbox-backend/src/audit.rs +++ b/crates/openshell-sandbox-backend/src/audit.rs @@ -49,7 +49,8 @@ mod tests { }, "landlock_abi": 3, "landlock_allow_deny": true, "udp_dns_round_trip": true, "tcp_dns_round_trip": true, - "tcp_allow_round_trip": true, "tcp_deny_round_trip": true + "tcp_allow_round_trip": true, "tcp_deny_round_trip": true, + "socket_loopback_confinement": true }); let properties = LinuxBoundaryAuditValidator.validate(&evidence).unwrap(); let audit: crate::boundary_protocol::NativeLinuxSandboxAuditEvidence = diff --git a/crates/openshell-supervisor/src/backend_setup/tests.rs b/crates/openshell-supervisor/src/backend_setup/tests.rs index c9b464146..16359e59b 100644 --- a/crates/openshell-supervisor/src/backend_setup/tests.rs +++ b/crates/openshell-supervisor/src/backend_setup/tests.rs @@ -357,6 +357,18 @@ impl NetworkMediationSource for TestIo { #[tonic::async_trait] impl BoundaryProcess for TestIo { + async fn attach( + &self, + ) -> std::result::Result + { + Ok(openshell_isolation_interface::contract::ProcessAttachment { + stdin: Box::new(tokio::io::sink()), + stdout: Box::new(tokio::io::empty()), + stderr: Some(Box::new(tokio::io::empty())), + terminal: None, + }) + } + async fn wait(&self) -> std::result::Result { Ok(BoundaryExitStatus::Exited(0)) }