runtime: privileged => all-run for the sandbox

kubernetes-retired / rktlet

[EOL] The rkt implementation of the Kubernetes Container Runtime Interface

Apache License 2.0

137 stars 43 forks source link

runtime: privileged => all-run for the sandbox #84

Closed euank closed 7 years ago

euank commented 7 years ago

This fixes an oversight in #80. The sandbox needs all privileges in order to grant them to individual processes, and the test wasn't good enough to catch that since the sandbox always had sys_admin regardless

cc @s-urbaniak