add a test for warnning on ambient caps setting error

Signed-off-by: lfbzhm <[email protected]>
opencontainers · Sep 27, 2024 · 4051eaa · 4051eaa
1 parent 063bd24
commit 4051eaa
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/tests/integration/capabilities.bats b/tests/integration/capabilities.bats
@@ -136,3 +136,11 @@ function teardown() {
 	[[ "${output}" == *"CapBnd:	0000000400000021"* ]]
 	[[ "${output}" == *"CapAmb:	0000000000000000"* ]]
 }
+
+@test "runc run [ambient caps not set in inheritable result in a warning]" {
+	update_config '	  .process.capabilities.inheritable = ["CAP_KILL"]
+			| .process.capabilities.ambient = ["CAP_KILL", "CAP_AUDIT_WRITE"]'
+	runc run test_amb
+	[ "$status" -eq 0 ]
+	[[ "$output" == **"unable to set Ambient capabilities:"* ]]
+}