Signed-off-by: Yuan Sun <sunyuan3@huawei.com>
@@ -2776,3 +2776,7 @@ func (s *DockerSuite) TestAppArmorTraceSelf(c *check.C) {
c.Fatal("ptrace of self failed.")
}
+
+func (s *DockerSuite) TestRunCapAddSYSTIME(c *check.C) {
+ dockerCmd(c, "run", "--cap-drop=ALL", "--cap-add=SYS_TIME", "busybox", "sh", "-c", "grep ^CapEff /proc/self/status | sed 's/^CapEff:\t//' | grep ^0000000002000000$")
+}