mesos-reviews mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Andrei Budnik <abud...@mesosphere.com>
Subject Review Request 70109: Added `LinuxSeccompIsolatorTest.LaunchWithSeccompDisabled` test.
Date Mon, 04 Mar 2019 14:03:10 GMT

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/70109/
-----------------------------------------------------------

Review request for mesos, Gilbert Song and Qian Zhang.


Bugs: MESOS-9613
    https://issues.apache.org/jira/browse/MESOS-9613


Repository: mesos


Description
-------

This test verifies that Seccomp filtering can be disabled via
`unconfined` flag in `SeccompInfo` message. We create a Mesos
containerizer with a default Seccomp profile that prohibits
`uname` syscall. Then, `uname` command is launched with `unconfined`
flag set, so it's expected that the Seccomp filter does not affect
this command.


Diffs
-----

  src/tests/containerizer/linux_seccomp_isolator_tests.cpp 1c4c3b1ea92bfbed37e599d6ad5dfd9cdcf9aea4



Diff: https://reviews.apache.org/r/70109/diff/1/


Testing
-------

`sudo src/mesos-tests --gtest_filter=LinuxSeccompIsolatorTest.*`


Thanks,

Andrei Budnik


Mime
  • Unnamed multipart/alternative (inline, None, 0 bytes)
View raw message