You are viewing a plain text version of this content. The canonical link for it is here.

Posted to reviews@mesos.apache.org by James Peach <jp...@apache.org> on 2017/07/01 00:12:08 UTC

Re: Review Request 60411: Allow frameworks to specify the capabilities bounding set.

-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/60411/
-----------------------------------------------------------

(Updated July 1, 2017, 12:12 a.m.)


Review request for mesos and Jie Yu.


Changes
-------

Fix typo in description.


Bugs: MESOS-7671
    https://issues.apache.org/jira/browse/MESOS-7671


Repository: mesos


Description (updated)
-------

Allow frameworks to specify the capabilities bounding set in the
LinuxInfo message. We need to explicitly make sure that this does
not exceed and bounding set specified by the operator, since that
is the outer limit of allowed privilege.


Diffs
-----

  src/slave/containerizer/mesos/isolators/linux/capabilities.cpp ff7b9f19e69f51bcf80ab4f4920604f2002242f1 


Diff: https://reviews.apache.org/r/60411/diff/2/


Testing
-------

make check (Fedora 25)


Thanks,

James Peach