SandboxedServices: update white listed docker daemon processes for lakitu
Starting with docker 1.13, the docker daemon processes are named dockerd
and docker-containerd(which will be docker-containe in the truncated
`ps` view). Also, apparently these processes run even in the VMTests
environment now.
BUG=None
TEST=trybot for lakitu-release passes, with CL:*410089
Change-Id: I1b87ce4d3df42068f3947c7ffaaced07ff88a7b2
Reviewed-on: https://chromium-review.googlesource.com/569317
Commit-Ready: Daniel Wang <wonderfly@google.com>
Tested-by: Daniel Wang <wonderfly@google.com>
Reviewed-by: Mike Frysinger <vapier@chromium.org>
diff --git a/client/site_tests/security_SandboxedServices/baseline.lakitu b/client/site_tests/security_SandboxedServices/baseline.lakitu
index 847d0e8..210d907 100644
--- a/client/site_tests/security_SandboxedServices/baseline.lakitu
+++ b/client/site_tests/security_SandboxedServices/baseline.lakitu
@@ -16,11 +16,9 @@
install_custom_,root,root,No,No,No,No
konlet-startup,root,root,No,No,No,No
-# These processes won't run without network (which is the case for VMTests), but
-# they also run as root and are not sandboxed. You will hit these if you try to
-# run VMTests on your own KVM instance.
-docker,root,root,No,No,No,No
-containerd,root,root,No,No,No,No
+# Docker daemon processes.
+dockerd,root,root,No,No,No,No
+docker-containe,root,root,No,No,No,No
# Processes that used by GCP compute image packages.
google_ip_forwa,root,root,No,No,No,No
diff --git a/client/site_tests/security_SandboxedServices/baseline.lakitu-gpu b/client/site_tests/security_SandboxedServices/baseline.lakitu-gpu
index 44ea544..c7f3980 100644
--- a/client/site_tests/security_SandboxedServices/baseline.lakitu-gpu
+++ b/client/site_tests/security_SandboxedServices/baseline.lakitu-gpu
@@ -16,11 +16,9 @@
install_custom_,root,root,No,No,No,No
konlet-startup,root,root,No,No,No,No
-# These processes won't run without network (which is the case for VMTests), but
-# they also run as root and are not sandboxed. You will hit these if you try to
-# run VMTests on your own KVM instance.
-docker,root,root,No,No,No,No
-containerd,root,root,No,No,No,No
+# Docker daemon processes.
+dockerd,root,root,No,No,No,No
+docker-containe,root,root,No,No,No,No
# Processes that used by GCP compute image packages.
google_ip_forwa,root,root,No,No,No,No
