github/containerd
4
0
Fork 0
Code Issues Pull Requests Packages Projects Releases 2 Wiki Activity

move up to latest critools; add apparmor profile check

Browse Source 
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
This commit is contained in:
Mike Brown
2020-04-26 15:46:32 -05:00
parent 14c4b47bb1
commit 776c125e4f
3 changed files with 45 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
pkg/server/container_create_unix_test.go
View File

@@ -882,14 +882,15 @@ func TestGenerateApparmorSpecOpts(t *testing.T) {
profile: runtimeDefault,
privileged: true,
},
"should set specified profile when local profile is specified": {
profile: profileNamePrefix + "test-profile",
specOpts: apparmor.WithProfile("test-profile"),
// TODO (mikebrow) add success with exising defined profile tests
"should return error when undefined local profile is specified": {
profile: profileNamePrefix + "test-profile",
expectErr: true,
},
"should set apparmor when local profile is specified and privileged is true": {
"should return error when undefined local profile is specified and privileged is true": {
profile: profileNamePrefix + "test-profile",
privileged: true,
specOpts: apparmor.WithProfile("test-profile"),
expectErr: true,
},
"should return error if specified profile is invalid": {
profile: "test-profile",