security_context: do not rely on /etc/hosts

It depends on runtime and CNI plugin used when testing. This patch uses /etc/passwd which should be always available instead. Signed-off-by: Antonio Murdaca <[email protected]>
kubernetes-sigs · Oct 19, 2017 · 9961699 · 9961699
1 parent 973eaea
commit 9961699
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/validate/security_context.go b/pkg/validate/security_context.go
@@ -482,7 +482,7 @@ var _ = framework.KubeDescribe("Security Context", func() {
 			podID, containerID = seccompTestContainer(rc, ic, localhost+blockchmodProfilePath)
 
 			By("verify seccomp profile")
-			verifySeccomp(rc, containerID, []string{"chmod", "400", "/etc/hosts"}, true, "Operation not permitted") // seccomp denied
+			verifySeccomp(rc, containerID, []string{"chmod", "400", "/"}, true, "Operation not permitted") // seccomp denied
 		})
 
 		It("should support seccomp default which is unconfined on the container", func() {