From 6d05174dd08dd34875dc4e73b8e6bcea6a2b87ea Mon Sep 17 00:00:00 2001 From: Peter Hunt Date: Thu, 31 Mar 2022 09:59:49 -0400 Subject: [PATCH] test: switch to testing CapBnd over CapInh as CRI-O will soon drop CapInh, see https://github.com/cri-o/cri-o/security/advisories/GHSA-4hj2-r2pm-3hc6 and CVE-2022-27652 Signed-off-by: Peter Hunt --- test/extended/security/scc.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/extended/security/scc.go b/test/extended/security/scc.go index 3e8b15b00c63..f93d9bf421ae 100644 --- a/test/extended/security/scc.go +++ b/test/extended/security/scc.go @@ -272,7 +272,7 @@ var _ = g.Describe("[sig-auth][Feature:SecurityContextConstraints] ", func() { desiredCapabilities := "000000000000051b" - capabilities, err := pod.Exec("cat /proc/1/status | grep CapInh | cut -f 2") + capabilities, err := pod.Exec("cat /proc/1/status | grep CapBnd | cut -f 2") o.Expect(err).NotTo(o.HaveOccurred()) capString, err := pod.Exec("capsh --decode=" + capabilities)