Package: autopkgtest
Version: 5.39
Severity: normal
X-Debbugs-Cc: par...@debian.org, s...@debian.org

With 544a086e10a0192c5950c6211373219ee2227ead we introduced checking for
capabilities when running the ChrootRunner tests; some more context is
in the MR description [1].

However, looks like this prevents running tests where full root
permissions are available. Looks like the cuprit it CAP_SYS_ADMIN
not being INHERITABLE:

# id
uid=0(root) gid=0(root) groups=0(root)
# python3 -c "import capng; 
print(bool(capng.capng_have_capability(capng.CAPNG_INHERITABLE,capng.CAP_SYS_ADMIN)))"
False

In this environment the ChrootRunner tests *do* work if I bypass the
capabilities check.

This is tested in a Debian VM and on a bare metal Ubuntu system.

--
Paride

[1] https://salsa.debian.org/ci-team/autopkgtest/-/merge_requests/394

Reply via email to