From d0e3b3c3a9a9c89cab120a72e55dd22262c1d004 Mon Sep 17 00:00:00 2001 From: Chris Evich Date: Mon, 9 Aug 2021 10:40:58 -0400 Subject: Enhance priv. dev. check Update test to confirm the negative-case, proving the `--privileged` "option is required" for this character device to be present in a container (including rootless). Signed-off-by: Chris Evich --- test/e2e/run_device_test.go | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) (limited to 'test') diff --git a/test/e2e/run_device_test.go b/test/e2e/run_device_test.go index e65655e84..064c65ce5 100644 --- a/test/e2e/run_device_test.go +++ b/test/e2e/run_device_test.go @@ -89,9 +89,13 @@ var _ = Describe("Podman run device", func() { }) It("podman run device host device with --privileged", func() { - session := podmanTest.Podman([]string{"run", "--privileged", ALPINE, "ls", "/dev/kmsg"}) + session := podmanTest.Podman([]string{"run", "--privileged", ALPINE, "test", "-c", "/dev/kmsg"}) session.WaitWithDefaultTimeout() Expect(session).Should(Exit(0)) + // verify --privileged is required + session2 := podmanTest.Podman([]string{"run", ALPINE, "test", "-c", "/dev/kmsg"}) + session2.WaitWithDefaultTimeout() + Expect(session2).Should((Exit(1))) }) It("podman run CDI device test", func() { -- cgit v1.2.3-54-g00ecf