ms2k/lazaret
SHA256
Watch
0
Code Releases 3 Activity

Permit subordinate sandbox identity transitions

Browse source
This commit is contained in:
ms2k 2026-07-22 03:08:27 +09:00
commit 09dae24f52
1 changed files with 66 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

6
crates/lazaret-runtime-supervisor/tests/sandbox_builder.rs
View file

@ -294,7 +294,11 @@ fn deterministic_snapshot_has_only_private_namespaces_and_fixed_runtime_shape()
assert_eq!(
specification["process"]["capabilities"],
serde_json::json!({
"bounding": [], "effective": [], "inheritable": [], "permitted": [], "ambient": []
"bounding": ["CAP_SETGID", "CAP_SETUID"],
"effective": ["CAP_SETGID", "CAP_SETUID"],
"inheritable": [],
"permitted": ["CAP_SETGID", "CAP_SETUID"],
"ambient": []
})
);