mesos-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From James Peach <jpe...@apache.org>
Subject Re: Review Request 59550: Check bounding capabilities at isolator creation time.
Date Mon, 05 Jun 2017 16:25:22 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59550/
-----------------------------------------------------------

(Updated June 5, 2017, 4:25 p.m.)


Review request for mesos, Jie Yu and Jiang Yan Xu.


Changes
-------

Rebased.


Bugs: MESOS-7476
    https://issues.apache.org/jira/browse/MESOS-7476


Repository: mesos


Description
-------

When we create the `linux/capabilities` isolator, enforce the rule that
the bounding capabilities are a superset of the allowed capabilities
when both are specified.


Diffs (updated)
-----

  src/slave/containerizer/mesos/isolators/linux/capabilities.cpp 60d22aa877c1ab62a08222e5efe8800e337684da

  src/tests/containerizer/linux_capabilities_isolator_tests.cpp 40376a03fdb8f931f8d3f83b1c3fa6207e02c1d1



Diff: https://reviews.apache.org/r/59550/diff/2/

Changes: https://reviews.apache.org/r/59550/diff/1-2/


Testing
-------

make check (Fedora 25)


Thanks,

James Peach


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message