test: assert that we get caps in thread forks

Signed-off-by: Djalal Harouni <[email protected]>
cilium · Apr 3, 2024 · 91ec63f · 91ec63f
1 parent 1cc0a7a
commit 91ec63f
Showing 1 changed file with 9 additions and 3 deletions.
diff --git a/pkg/sensors/tracing/kprobe_threads_test.go b/pkg/sensors/tracing/kprobe_threads_test.go
@@ -18,6 +18,7 @@ import (
 	"github.com/cilium/tetragon/pkg/logger"
 	sm "github.com/cilium/tetragon/pkg/matchers/stringmatcher"
 	"github.com/cilium/tetragon/pkg/observer/observertesthelper"
+	"github.com/cilium/tetragon/pkg/reader/caps"
 	"github.com/cilium/tetragon/pkg/testutils"
 	tus "github.com/cilium/tetragon/pkg/testutils/sensors"
 	"github.com/stretchr/testify/assert"
@@ -90,10 +91,13 @@ spec:
 
 	cti.AssertPidsTids(t)
 
+	myCaps := ec.NewCapabilitiesChecker().FromCapabilities(caps.GetCurrentCapabilities())
+
 	parentCheck := ec.NewProcessChecker().
 		WithBinary(sm.Suffix("threads-tester")).
 		WithPid(cti.ParentPid).
-		WithTid(cti.ParentTid)
+		WithTid(cti.ParentTid).
+		WithCap(myCaps)
 
 	execCheck := ec.NewProcessExecChecker("").
 		WithProcess(parentCheck)
@@ -104,15 +108,17 @@ spec:
 	child1Checker := ec.NewProcessChecker().
 		WithBinary(sm.Suffix("threads-tester")).
 		WithPid(cti.Child1Pid).
-		WithTid(cti.Child1Tid)
+		WithTid(cti.Child1Tid).
+		WithCap(myCaps)
 
 	child1KpChecker := ec.NewProcessKprobeChecker("").
 		WithProcess(child1Checker).WithParent(parentCheck)
 
 	thread1Checker := ec.NewProcessChecker().
 		WithBinary(sm.Suffix("threads-tester")).
 		WithPid(cti.Thread1Pid).
-		WithTid(cti.Thread1Tid)
+		WithTid(cti.Thread1Tid).
+		WithCap(myCaps)
 
 	thread1KpChecker := ec.NewProcessKprobeChecker("").
 		WithProcess(thread1Checker).WithParent(parentCheck)