summaryrefslogtreecommitdiffstats
path: root/plugin
diff options
context:
space:
mode:
Diffstat (limited to 'plugin')
-rw-r--r--plugin/rpcplugin/sandbox/sandbox_linux.go11
1 files changed, 10 insertions, 1 deletions
diff --git a/plugin/rpcplugin/sandbox/sandbox_linux.go b/plugin/rpcplugin/sandbox/sandbox_linux.go
index dad485f68..4ade00cf2 100644
--- a/plugin/rpcplugin/sandbox/sandbox_linux.go
+++ b/plugin/rpcplugin/sandbox/sandbox_linux.go
@@ -267,7 +267,7 @@ func pivotRoot(newRoot string) error {
func dropInheritableCapabilities() error {
type capHeader struct {
version uint32
- pid int
+ pid int32
}
type capData struct {
@@ -425,6 +425,15 @@ func checkSupportInNamespace() error {
return errors.Wrapf(err, "unable to enable seccomp filter")
}
+ if f, err := os.Create(os.DevNull); err != nil {
+ return errors.Wrapf(err, "unable to open os.DevNull")
+ } else {
+ defer f.Close()
+ if _, err = f.Write([]byte("foo")); err != nil {
+ return errors.Wrapf(err, "unable to write to os.DevNull")
+ }
+ }
+
return nil
}