Skip to content

Commit 6dd2b90

Browse files
committed
validate: do not check NET_ADMIN with ip link add
Signed-off-by: Antonio Murdaca <[email protected]>
1 parent e7a6236 commit 6dd2b90

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

pkg/validate/security_context.go

+1-1
Original file line numberDiff line numberDiff line change
@@ -825,7 +825,7 @@ func createPrivilegedContainer(rc internalapi.RuntimeService, ic internalapi.Ima
825825

826826
// checkNetworkManagement checks the container's network management works fine.
827827
func checkNetworkManagement(rc internalapi.RuntimeService, containerID string, manageable bool) {
828-
cmd := []string{"ip", "link", "add", "dummy0", "type", "dummy"}
828+
cmd := []string{"brctl", "addbr", "foobar"}
829829

830830
stdout, stderr, err := rc.ExecSync(containerID, cmd, time.Duration(defaultExecSyncTimeout)*time.Second)
831831
msg := fmt.Sprintf("cmd %v, stdout %q, stderr %q", cmd, stdout, stderr)

0 commit comments

Comments
 (0)