the logic is from runc https://github.com/opencontainers/runc/blob/master/libcontainer/cgroups/fs/devices_v2.go#L44
(devices []specs.LinuxDeviceCgroup)
| 87 | // the logic is from runc |
| 88 | // https://github.com/opencontainers/runc/blob/master/libcontainer/cgroups/fs/devices_v2.go#L44 |
| 89 | func canSkipEBPFError(devices []specs.LinuxDeviceCgroup) bool { |
| 90 | for _, dev := range devices { |
| 91 | if dev.Allow || !isRWM(dev.Access) { |
| 92 | return false |
| 93 | } |
| 94 | } |
| 95 | return true |
| 96 | } |
no test coverage detected
searching dependent graphs…