Update PingPert unprivileged restore test capabilities (#4605)

- Update PingPert unprivileged restore test capabilities Signed-off-by: LongyuZhang <longyu.zhang@ibm.com>
adoptium · Jun 5, 2023 · 3d3de28 · 3d3de28
1 parent a65d675
commit 3d3de28
Showing 1 changed file with 2 additions and 3 deletions.
diff --git a/external/criu/pingPerf.sh b/external/criu/pingPerf.sh
@@ -107,14 +107,13 @@ createRestoreImage() {
 unprivilegedRestore() {
     echo "unprivileged restore $restoreImage ..."
     echo -ne "CONTAINER_ID=" > containerId.log
+    echo "sudo podman run --rm --detach -p 9080:9080 --cap-add=CHECKPOINT_RESTORE --cap-add=SETPCAP $restoreImage"
     sudo podman run \
         --rm \
         --detach \
         -p 9080:9080 \
         --cap-add=CHECKPOINT_RESTORE \
-        --cap-add=NET_ADMIN \
-        --cap-add=SYS_PTRACE \
-        --security-opt seccomp=criuseccompprofile.json \
+        --cap-add=SETPCAP \
         $restoreImage >> containerId.log
 }