| 32 | namespace slave { |
| 33 | |
| 34 | Try<Isolator*> LinuxNNPIsolatorProcess::create(const Flags& flags) |
| 35 | { |
| 36 | // PR_SET_NO_NEW_PRIVS requires Linux kernel version greater than or |
| 37 | // equal to 3.5. |
| 38 | Try<Version> version = mesos::kernelVersion(); |
| 39 | |
| 40 | if (version.isError()) { |
| 41 | return Error("Could not determine kernel version"); |
| 42 | } |
| 43 | |
| 44 | if (version.get() < Version(3, 5, 0)) { |
| 45 | return Error("Linux kernel version greater than or equal to 3.5 required"); |
| 46 | } |
| 47 | |
| 48 | return new MesosIsolator( |
| 49 | Owned<MesosIsolatorProcess>(new LinuxNNPIsolatorProcess())); |
| 50 | } |
| 51 | |
| 52 | |
| 53 | bool LinuxNNPIsolatorProcess::supportsNesting() |
nothing calls this directly
no test coverage detected