Capability tests does not rely on interited zeroed caps

Signed-off-by: Will Martin <wmartin@pivotal.io>
cloudfoundry-attic · Aug 4, 2016 · 9660800 · 9660800
1 parent 0b6a67f
commit 9660800
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/integration/helpers/capcheck/capcheck_linux_test.go b/integration/helpers/capcheck/capcheck_linux_test.go
@@ -23,15 +23,15 @@ var _ = Describe("capcheck", func() {
 		Describe("probe "+cap, func() {
 			Context("when a process does have "+cap, func() { // assumes tests are run as root
 				It("succeeds", func() {
-					session, err := gexec.Start(exec.Command("capsh", "--", "-c", fmt.Sprintf("%s %s", capabilityTestBin, cap)), GinkgoWriter, GinkgoWriter)
+					session, err := gexec.Start(exec.Command("capsh", "--inh="+cap, "--", "-c", fmt.Sprintf("%s %s", capabilityTestBin, cap)), GinkgoWriter, GinkgoWriter)
 					Expect(err).NotTo(HaveOccurred())
 					Eventually(session).Should(gexec.Exit(0))
 				})
 			})
 
 			Context("when a process does not have "+cap, func() {
 				It("logs an error and returns a bad exit status code", func() {
-					session, err := gexec.Start(exec.Command("capsh", "--drop="+cap, "--", "-c", fmt.Sprintf("%s %s", capabilityTestBin, cap)), GinkgoWriter, GinkgoWriter)
+					session, err := gexec.Start(exec.Command("capsh", "--inh=", "--drop="+cap, "--", "-c", fmt.Sprintf("%s %s", capabilityTestBin, cap)), GinkgoWriter, GinkgoWriter)
 					Expect(err).NotTo(HaveOccurred())
 					Eventually(session).Should(gbytes.Say(expectedError))
 					Eventually(session).Should(gexec.Exit(1))