Test with just adding the cap_dac_read_search capability.

adelton · Dec 27, 2024 · 841fd17 · 841fd17
1 parent c251d21
commit 841fd17
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/tests/run-master-and-replica.sh b/tests/run-master-and-replica.sh
@@ -133,7 +133,7 @@ function run_ipa_container() {
 	(
 	set -x
 	umask 0
-	$docker run $readonly_run -d --name "$N" $OPTS \
+	$docker run --cap-add=cap_dac_read_search $readonly_run -d --name "$N" $OPTS \
 		-v $VOLUME:/data:Z $DOCKER_RUN_OPTS \
 		-e PASSWORD=Secret123 "$IMAGE" "$@"
 	)

diff --git a/tests/run-partial-tests.sh b/tests/run-partial-tests.sh
@@ -40,7 +40,7 @@ function run_and_wait_for () {
 	if [ -n "$seccomp" ] ; then
 		OPTS="$OPTS --security-opt seccomp=$seccomp"
 	fi
-	( set -x ; $docker run --name $NAME -d -h ipa.example.test \
+	( set -x ; $docker run --cap-add=cap_dac_read_search --name $NAME -d -h ipa.example.test \
 		$OPTS $IMAGE )
 	for j in $( seq 1 30 ) ; do
 		if $docker exec $NAME systemctl is-system-running --no-pager -l 2> /dev/null | grep -q -E 'running|degraded' ; then