Uploaded image for project: 'Mesos'
  1. Mesos
  2. MESOS-7476

Restrict capabilities to only the bounding set.

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.4.0
    • containerization
    • None

    Description

      As a security improvement, it would be useful to be able to set the bounding capability set without also granting those capabilities. This is what the --allowed_capabilities flag sounds like it does.

      Attachments

        Issue Links

          is related to

          Improvement - An improvement or enhancement to an existing feature or task. MESOS-7477 Support ambient capabilities.

          • Major - Major loss of function.
          • Resolved
          relates to

          Bug - A problem which impairs or prevents the functions of the product. MESOS-7671 Let frameworks specify the task bounding capabilities.

          • Major - Major loss of function.
          • Resolved

          Activity

            People

              jamespeach James Peach
              jamespeach James Peach
              Jie Yu Jie Yu
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: