diff --git a/tests/integration/no_pivot.bats b/tests/integration/no_pivot.bats index 4baf0bf2d..30dbe7f73 100644 --- a/tests/integration/no_pivot.bats +++ b/tests/integration/no_pivot.bats @@ -13,7 +13,9 @@ function teardown() { @test "runc run --no-pivot must not expose bare /proc" { requires root - update_config '.process.args |= ["unshare", "-mrpf", "sh", "-euxc", "mount -t proc none /proc && echo h > /proc/sysrq-trigger"]' + update_config ' .process.args |= ["unshare", "-mrpf", "sh", "-euxc", "mount -t proc none /proc && echo h > /proc/sysrq-trigger"] + | .process.capabilities.bounding += ["CAP_SETFCAP"] + | .process.capabilities.permitted += ["CAP_SETFCAP"]' runc run --no-pivot test_no_pivot [ "$status" -eq 1 ]