You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@mesos.apache.org by James Peach <jp...@apache.org> on 2017/06/24 06:11:11 UTC
Review Request 60411: Allow frameworks to specify the capabilities
bounding set.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/60411/
-----------------------------------------------------------
Review request for mesos and Jie Yu.
Bugs: MESOS-7671
https://issues.apache.org/jira/browse/MESOS-7671
Repository: mesos
Description
-------
Allow frameworks to specifc the capabilities bounding set in the
LinuxInfo message. We need to explicitly make sure that this does
not exceed and bounding set specified by the operator, since that
is the outer limit of allowed privilege.
Diffs
-----
src/slave/containerizer/mesos/isolators/linux/capabilities.cpp ff7b9f19e69f51bcf80ab4f4920604f2002242f1
Diff: https://reviews.apache.org/r/60411/diff/1/
Testing
-------
make check (Fedora 25)
Thanks,
James Peach
Re: Review Request 60411: Allow frameworks to specify the capabilities
bounding set.
Posted by James Peach <jp...@apache.org>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/60411/
-----------------------------------------------------------
(Updated July 1, 2017, 12:12 a.m.)
Review request for mesos and Jie Yu.
Changes
-------
Fix typo in description.
Bugs: MESOS-7671
https://issues.apache.org/jira/browse/MESOS-7671
Repository: mesos
Description (updated)
-------
Allow frameworks to specify the capabilities bounding set in the
LinuxInfo message. We need to explicitly make sure that this does
not exceed and bounding set specified by the operator, since that
is the outer limit of allowed privilege.
Diffs
-----
src/slave/containerizer/mesos/isolators/linux/capabilities.cpp ff7b9f19e69f51bcf80ab4f4920604f2002242f1
Diff: https://reviews.apache.org/r/60411/diff/2/
Testing
-------
make check (Fedora 25)
Thanks,
James Peach
Re: Review Request 60411: Allow frameworks to specify the capabilities
bounding set.
Posted by Jie Yu <yu...@gmail.com>.
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/60411/#review179437
-----------------------------------------------------------
Ship it!
Ship It!
- Jie Yu
On June 24, 2017, 6:11 a.m., James Peach wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/60411/
> -----------------------------------------------------------
>
> (Updated June 24, 2017, 6:11 a.m.)
>
>
> Review request for mesos and Jie Yu.
>
>
> Bugs: MESOS-7671
> https://issues.apache.org/jira/browse/MESOS-7671
>
>
> Repository: mesos
>
>
> Description
> -------
>
> Allow frameworks to specifc the capabilities bounding set in the
> LinuxInfo message. We need to explicitly make sure that this does
> not exceed and bounding set specified by the operator, since that
> is the outer limit of allowed privilege.
>
>
> Diffs
> -----
>
> src/slave/containerizer/mesos/isolators/linux/capabilities.cpp ff7b9f19e69f51bcf80ab4f4920604f2002242f1
>
>
> Diff: https://reviews.apache.org/r/60411/diff/2/
>
>
> Testing
> -------
>
> make check (Fedora 25)
>
>
> Thanks,
>
> James Peach
>
>