summaryrefslogtreecommitdiff
path: root/test/system/030-run.bats
diff options
context:
space:
mode:
authorGiuseppe Scrivano <gscrivan@redhat.com>2020-09-29 10:06:48 +0200
committerGiuseppe Scrivano <gscrivan@redhat.com>2020-09-30 15:14:07 +0200
commit703381b4a2b1dc761ffee0d8e36b47f21ffd92c5 (patch)
treeecad6d09a25728b94a5939dc884b4f9fcb52c48d /test/system/030-run.bats
parent2ee415be90b8d6ab75f9fe579fc1b8690e023d3c (diff)
downloadpodman-703381b4a2b1dc761ffee0d8e36b47f21ffd92c5.tar.gz
podman-703381b4a2b1dc761ffee0d8e36b47f21ffd92c5.tar.bz2
podman-703381b4a2b1dc761ffee0d8e36b47f21ffd92c5.zip
capabilities: always set ambient and inheritable
change capabilities handling to reflect what docker does. Bounding: set to caplist Inheritable: set to caplist Effective: if uid != 0 then clear; else set to caplist Permitted: if uid != 0 then clear; else set to caplist Ambient: clear Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
Diffstat (limited to 'test/system/030-run.bats')
-rw-r--r--test/system/030-run.bats4
1 files changed, 2 insertions, 2 deletions
diff --git a/test/system/030-run.bats b/test/system/030-run.bats
index b3599cc17..354c6506d 100644
--- a/test/system/030-run.bats
+++ b/test/system/030-run.bats
@@ -304,7 +304,7 @@ echo $rand | 0 | $rand
# #6991 : /etc/passwd is modifiable
@test "podman run : --userns=keep-id: passwd file is modifiable" {
- run_podman run -d --userns=keep-id $IMAGE sh -c 'while ! test -e /stop; do sleep 0.1; done'
+ run_podman run -d --userns=keep-id --cap-add=dac_override $IMAGE sh -c 'while ! test -e /tmp/stop; do sleep 0.1; done'
cid="$output"
# Assign a UID that is (a) not in our image /etc/passwd and (b) not
@@ -325,7 +325,7 @@ echo $rand | 0 | $rand
is "$output" "newuser3:x:$uid:999:$gecos:/home/newuser3:/bin/sh" \
"newuser3 added to /etc/passwd in container"
- run_podman exec $cid touch /stop
+ run_podman exec $cid touch /tmp/stop
run_podman wait $cid
}