diff options
| author | Urvashi Mohnani <umohnani@redhat.com> | 2020-12-07 10:57:46 -0500 |
|---|---|---|
| committer | Urvashi Mohnani <umohnani@redhat.com> | 2020-12-08 09:42:33 -0500 |
| commit | 239bd57662162e9754421a31db9cf529cee8d701 (patch) | |
| tree | 243ff699ca572057e974d3c546d46b9340529d65 /test/e2e | |
| parent | e6f80fa61aa082d2226b8258ea247186451d84d3 (diff) | |
| download | podman-239bd57662162e9754421a31db9cf529cee8d701.tar.gz podman-239bd57662162e9754421a31db9cf529cee8d701.tar.bz2 podman-239bd57662162e9754421a31db9cf529cee8d701.zip | |
Add systempaths=unconfined option
Add the systempaths=unconfined option to --security-opt
to match the docker options for unmasking all the paths
that are masked by default.
Add the mask and unmask options to the podman create doc.
Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
Diffstat (limited to 'test/e2e')
| -rw-r--r-- | test/e2e/run_test.go | 8 |
1 files changed, 8 insertions, 0 deletions
diff --git a/test/e2e/run_test.go b/test/e2e/run_test.go index efc125d2b..7534030af 100644 --- a/test/e2e/run_test.go +++ b/test/e2e/run_test.go @@ -264,6 +264,14 @@ var _ = Describe("Podman run", func() { session.WaitWithDefaultTimeout() Expect(session.OutputToString()).To(BeEmpty()) Expect(session.ExitCode()).To(Equal(0)) + + session = podmanTest.Podman([]string{"run", "-d", "--name=maskCtr4", "--security-opt", "systempaths=unconfined", ALPINE, "sleep", "200"}) + session.WaitWithDefaultTimeout() + Expect(session.ExitCode()).To(Equal(0)) + session = podmanTest.Podman([]string{"exec", "maskCtr4", "ls", "/sys/firmware"}) + session.WaitWithDefaultTimeout() + Expect(session.OutputToString()).To(Not(BeEmpty())) + Expect(session.ExitCode()).To(Equal(0)) }) It("podman run seccomp test", func() { |