Merge pull request #8110 from lsm5/cap-net-raw

replace net_raw with setuid
containers · Oct 22, 2020 · 2ca4af6 · 2ca4af6
2 parents a53a660 + 914bbf5
commit 2ca4af6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/test/e2e/run_security_labels.go b/test/e2e/run_security_labels.go
@@ -94,7 +94,7 @@ var _ = Describe("Podman generate kube", func() {
 		test1.WaitWithDefaultTimeout()
 		Expect(test1.ExitCode()).To(BeZero())
 
-		commit := podmanTest.Podman([]string{"commit", "-c", "label=io.containers.capabilities=sys_chroot,net_raw", "test1", "image1"})
+		commit := podmanTest.Podman([]string{"commit", "-c", "label=io.containers.capabilities=sys_chroot,setuid", "test1", "image1"})
 		commit.WaitWithDefaultTimeout()
 		Expect(commit.ExitCode()).To(BeZero())
 
@@ -108,7 +108,7 @@ var _ = Describe("Podman generate kube", func() {
 
 		ctr := inspect.InspectContainerToJSON()
 		caps := strings.Join(ctr[0].EffectiveCaps, ",")
-		Expect(caps).To(Equal("CAP_SYS_CHROOT,CAP_NET_RAW"))
+		Expect(caps).To(Equal("CAP_SYS_CHROOT,CAP_SETUID"))
 
 	})