mirror of
https://github.com/opencontainers/runc.git
synced 2026-07-11 06:03:57 +08:00
Merge pull request #3603 from kolyshkin/drop-inh
tests/int: do not set inheritable capabilities
This commit is contained in:
@@ -40,7 +40,6 @@ function teardown() {
|
||||
| .linux.devices = [{"path": "/dev/kmsg", "type": "c", "major": 1, "minor": 11}]
|
||||
| .process.capabilities.bounding += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.effective += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.inheritable += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.permitted += ["CAP_SYSLOG"]
|
||||
| .process.args |= ["sh"]'
|
||||
|
||||
@@ -78,7 +77,6 @@ function teardown() {
|
||||
| .process.args |= ["sh"]
|
||||
| .process.capabilities.bounding += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.effective += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.inheritable += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.permitted += ["CAP_SYSLOG"]
|
||||
| .hostname = "myhostname"'
|
||||
|
||||
@@ -114,7 +112,6 @@ function teardown() {
|
||||
| .process.args |= ["sh"]
|
||||
| .process.capabilities.bounding += ["CAP_MKNOD"]
|
||||
| .process.capabilities.effective += ["CAP_MKNOD"]
|
||||
| .process.capabilities.inheritable += ["CAP_MKNOD"]
|
||||
| .process.capabilities.permitted += ["CAP_MKNOD"]'
|
||||
|
||||
runc run -d --console-socket "$CONSOLE_SOCKET" test_allow_block
|
||||
|
||||
@@ -642,7 +642,6 @@ EOF
|
||||
| .linux.devices = [{"path": "/dev/kmsg", "type": "c", "major": 1, "minor": 11}]
|
||||
| .process.capabilities.bounding += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.effective += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.inheritable += ["CAP_SYSLOG"]
|
||||
| .process.capabilities.permitted += ["CAP_SYSLOG"]
|
||||
| .process.args |= ["sh", "-c", "while true; do head -c 100 /dev/kmsg 2> /dev/null; done"]'
|
||||
|
||||
|
||||
Reference in New Issue
Block a user