summaryrefslogtreecommitdiff
path: root/test/e2e/run_security_labels.go
diff options
context:
space:
mode:
authorLokesh Mandvekar <lsm5@fedoraproject.org>2020-10-22 12:17:58 -0400
committerLokesh Mandvekar <lsm5@fedoraproject.org>2020-10-22 12:18:04 -0400
commit914bbf5e49ad69ad7415353e209c183c0c3f5b2d (patch)
treea03fa3ee5b9314017f0cd760c8542838555eb107 /test/e2e/run_security_labels.go
parent2cd2359a6d9ba4135495dc9be616bb1edebb170d (diff)
downloadpodman-914bbf5e49ad69ad7415353e209c183c0c3f5b2d.tar.gz
podman-914bbf5e49ad69ad7415353e209c183c0c3f5b2d.tar.bz2
podman-914bbf5e49ad69ad7415353e209c183c0c3f5b2d.zip
replace net_raw with setuid
podman does not allow setting CAP_NET_RAW Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
Diffstat (limited to 'test/e2e/run_security_labels.go')
-rw-r--r--test/e2e/run_security_labels.go4
1 files changed, 2 insertions, 2 deletions
diff --git a/test/e2e/run_security_labels.go b/test/e2e/run_security_labels.go
index 2a0b0467d..0c5621e3f 100644
--- a/test/e2e/run_security_labels.go
+++ b/test/e2e/run_security_labels.go
@@ -94,7 +94,7 @@ var _ = Describe("Podman generate kube", func() {
test1.WaitWithDefaultTimeout()
Expect(test1.ExitCode()).To(BeZero())
- commit := podmanTest.Podman([]string{"commit", "-c", "label=io.containers.capabilities=sys_chroot,net_raw", "test1", "image1"})
+ commit := podmanTest.Podman([]string{"commit", "-c", "label=io.containers.capabilities=sys_chroot,setuid", "test1", "image1"})
commit.WaitWithDefaultTimeout()
Expect(commit.ExitCode()).To(BeZero())
@@ -108,7 +108,7 @@ var _ = Describe("Podman generate kube", func() {
ctr := inspect.InspectContainerToJSON()
caps := strings.Join(ctr[0].EffectiveCaps, ",")
- Expect(caps).To(Equal("CAP_SYS_CHROOT,CAP_NET_RAW"))
+ Expect(caps).To(Equal("CAP_SYS_CHROOT,CAP_SETUID"))
})