diff options
| author | Matthew Heon <mheon@redhat.com> | 2020-06-23 11:20:30 -0400 |
|---|---|---|
| committer | Matthew Heon <mheon@redhat.com> | 2020-06-23 12:46:32 -0400 |
| commit | 039eaccb5b27cedf39a0b8b84697300bf53a6335 (patch) | |
| tree | 510c618f171d582e0cd9c6fdce3137e37fab4a9e /test/e2e/run_selinux_test.go | |
| parent | 73514b1465fe2f79b82d017cdb11d587d6f7df3d (diff) | |
| download | podman-039eaccb5b27cedf39a0b8b84697300bf53a6335.tar.gz podman-039eaccb5b27cedf39a0b8b84697300bf53a6335.tar.bz2 podman-039eaccb5b27cedf39a0b8b84697300bf53a6335.zip | |
Add tests for --privileged with other flags
With Podman v2.0, we broke (or thought we were going to break)
using `--privileged` with `--group-add` and `--security-opt`
(specifically using `--security-opt` for SELinux config).
Signed-off-by: Matthew Heon <mheon@redhat.com>
Diffstat (limited to 'test/e2e/run_selinux_test.go')
| -rw-r--r-- | test/e2e/run_selinux_test.go | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/test/e2e/run_selinux_test.go b/test/e2e/run_selinux_test.go index 358137aa9..8b33a05b2 100644 --- a/test/e2e/run_selinux_test.go +++ b/test/e2e/run_selinux_test.go @@ -177,4 +177,13 @@ var _ = Describe("Podman run", func() { Expect(session.OutputToString()).To(Equal(session1.OutputToString())) }) + It("podman run --privileged and --security-opt SELinux options", func() { + session := podmanTest.Podman([]string{"run", "-it", "--privileged", "--security-opt", "label=type:spc_t", "--security-opt", "label=level:s0:c1,c2", ALPINE, "cat", "/proc/self/attr/current"}) + session.WaitWithDefaultTimeout() + Expect(session.ExitCode()).To(Equal(0)) + match, _ := session.GrepString("spc_t") + Expect(match).To(BeTrue()) + match2, _ := session.GrepString("s0:c1,c2") + Expect(match2).To(BeTrue()) + }) }) |