diff options
| author | Matthew Heon <mheon@redhat.com> | 2020-05-19 15:43:04 -0400 |
|---|---|---|
| committer | Matthew Heon <mheon@redhat.com> | 2020-05-20 16:48:20 -0400 |
| commit | cc65430145aee98ffefc4b9a505793e470134e94 (patch) | |
| tree | 2391d8b7a17679bfd7eccda1ef5023682d53be87 /test/e2e | |
| parent | 0f8ad039235137d086b9fea33bb74b362e625cdd (diff) | |
| download | podman-cc65430145aee98ffefc4b9a505793e470134e94.tar.gz podman-cc65430145aee98ffefc4b9a505793e470134e94.tar.bz2 podman-cc65430145aee98ffefc4b9a505793e470134e94.zip | |
Turn off 'noexec' option by default for named volumes
We previously enforced this for security reasons, but as Dan has
explained on several occasions, it's not very valuable there
(it's trivially easy to bypass) and it does seriously annoy folks
trying to use named volumes. Flip the default from 'on' to 'off'.
Signed-off-by: Matthew Heon <mheon@redhat.com>
Diffstat (limited to 'test/e2e')
| -rw-r--r-- | test/e2e/create_test.go | 2 | ||||
| -rw-r--r-- | test/e2e/run_volume_test.go | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/test/e2e/create_test.go b/test/e2e/create_test.go index 1041b30bb..1846f1f29 100644 --- a/test/e2e/create_test.go +++ b/test/e2e/create_test.go @@ -205,7 +205,7 @@ var _ = Describe("Podman create", func() { session = podmanTest.Podman([]string{"logs", "test_tmpfs"}) session.WaitWithDefaultTimeout() Expect(session.ExitCode()).To(Equal(0)) - Expect(session.OutputToString()).To(ContainSubstring("/create/test rw,nosuid,nodev,noexec,relatime - tmpfs")) + Expect(session.OutputToString()).To(ContainSubstring("/create/test rw,nosuid,nodev,relatime - tmpfs")) }) It("podman create --pod automatically", func() { diff --git a/test/e2e/run_volume_test.go b/test/e2e/run_volume_test.go index 1f892d9f8..58091ff68 100644 --- a/test/e2e/run_volume_test.go +++ b/test/e2e/run_volume_test.go @@ -117,7 +117,7 @@ var _ = Describe("Podman run with volumes", func() { session = podmanTest.Podman([]string{"run", "--rm", "--mount", "type=tmpfs,target=" + dest, ALPINE, "grep", dest, "/proc/self/mountinfo"}) session.WaitWithDefaultTimeout() Expect(session.ExitCode()).To(Equal(0)) - Expect(session.OutputToString()).To(ContainSubstring(dest + " rw,nosuid,nodev,noexec,relatime - tmpfs")) + Expect(session.OutputToString()).To(ContainSubstring(dest + " rw,nosuid,nodev,relatime - tmpfs")) session = podmanTest.Podman([]string{"run", "--rm", "--mount", "type=tmpfs,target=/etc/ssl,tmpcopyup", ALPINE, "ls", "/etc/ssl"}) session.WaitWithDefaultTimeout() |