-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/59550/
-----------------------------------------------------------
Review request for mesos, Jie Yu and Jiang Yan Xu.
Bugs: MESOS-7476
https://issues.apache.org/jira/browse/MESOS-7476
Repository: mesos
Description
-------
When we create the `linux/capabilities` isolator, enforce the rule that
the bounding capabilities are a superset of the allowed capabilities
when both are specified.
Diffs
-----
src/slave/containerizer/mesos/isolators/linux/capabilities.cpp
60d22aa877c1ab62a08222e5efe8800e337684da
src/tests/containerizer/linux_capabilities_isolator_tests.cpp
40376a03fdb8f931f8d3f83b1c3fa6207e02c1d1
Diff: https://reviews.apache.org/r/59550/diff/1/
Testing
-------
make check (Fedora 25)
Thanks,
James Peach
