(t *testing.T)
| 56 | } |
| 57 | |
| 58 | func TestMergeCapabilitiesAddAll(t *testing.T) { |
| 59 | base := []string{"CAP_SYS_ADMIN", "CAP_NET_ADMIN", "CAP_CHOWN"} |
| 60 | adds := []string{"all"} |
| 61 | drops := []string{} |
| 62 | caps, err := MergeCapabilities(base, adds, drops) |
| 63 | require.Nil(t, err) |
| 64 | allCaps, err := BoundingSet() |
| 65 | require.Nil(t, err) |
| 66 | assert.Equal(t, caps, allCaps) |
| 67 | |
| 68 | drops = []string{"CAP_SETUID", "CAP_CHOWN"} |
| 69 | caps, err = MergeCapabilities(base, adds, drops) |
| 70 | require.Nil(t, err) |
| 71 | assert.NotEqual(t, caps, allCaps) |
| 72 | assert.False(t, stringInSlice("CAP_SETUID", caps)) |
| 73 | assert.False(t, stringInSlice("CAP_CHOWN", caps)) |
| 74 | } |
| 75 | |
| 76 | func TestMergeCapabilitiesAddAllDropAll(t *testing.T) { |
| 77 | base := []string{"CAP_SYS_ADMIN", "CAP_NET_ADMIN", "CAP_CHOWN"} |
nothing calls this directly
no test coverage detected
searching dependent graphs…