Uploaded image for project: 'Mesos'
  1. Mesos
  2. MESOS-7476

Restrict capabilities to only the bounding set.

Agile BoardAttach filesAttach ScreenshotVotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.4.0
    • containerization
    • None

    Description

      As a security improvement, it would be useful to be able to set the bounding capability set without also granting those capabilities. This is what the --allowed_capabilities flag sounds like it does.

      Attachments

        Issue Links

        is related to

        Improvement - An improvement or enhancement to an existing feature or task. MESOS-7477 Support ambient capabilities.

        • Major - Major loss of function.
        • Resolved
        relates to

        Bug - A problem which impairs or prevents the functions of the product. MESOS-7671 Let frameworks specify the task bounding capabilities.

        • Major - Major loss of function.
        • Resolved

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            jamespeach James Peach
            jamespeach James Peach
            Jie Yu Jie Yu
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Slack

                Issue deployment