Fix a privileged check.

Signed-off-by: Lantao Liu <lantaol@google.com>
2018-01-27 02:25:52 +00:00
parent 9f6315bc88
commit 4dfd8250fd
2 changed files with 47 additions and 1 deletions
--- a/pkg/server/container_create.go
+++ b/pkg/server/container_create.go
@@ -324,7 +324,7 @@ func (c *criContainerdService) generateContainerSpec(id string, sandboxID string
 	}

 	if securityContext.GetPrivileged() {
-		if !securityContext.GetPrivileged() {
+		if !sandboxConfig.GetLinux().GetSecurityContext().GetPrivileged() {
 			return nil, fmt.Errorf("no privileged container allowed in sandbox")
 		}
 		if err := setOCIPrivileged(&g, config); err != nil {