Skip to content

Commit 21be9c1

Browse files
committed
Avoid adding debug exec processes multiple times
1 parent 7345480 commit 21be9c1

File tree

1 file changed

+6
-4
lines changed

1 file changed

+6
-4
lines changed

src/confcom/azext_confcom/security_policy.py

Lines changed: 6 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -877,6 +877,11 @@ def load_policy_from_json(
877877

878878
envs += process_env_vars_from_config(container_properties)
879879

880+
if debug_mode:
881+
for exec_process in config.DEBUG_MODE_SETTINGS.get(config.ACI_FIELD_CONTAINERS_EXEC_PROCESSES, []):
882+
if exec_process not in exec_processes:
883+
exec_processes.append(exec_process)
884+
880885
output_containers.append(
881886
{
882887
config.ACI_FIELD_CONTAINERS_ID: image_name,
@@ -888,10 +893,7 @@ def load_policy_from_json(
888893
container_properties, config.ACI_FIELD_TEMPLATE_COMMAND
889894
) or [],
890895
config.ACI_FIELD_CONTAINERS_MOUNTS: mounts,
891-
config.ACI_FIELD_CONTAINERS_EXEC_PROCESSES: exec_processes
892-
+ config.DEBUG_MODE_SETTINGS.get(config.ACI_FIELD_CONTAINERS_EXEC_PROCESSES)
893-
if debug_mode
894-
else exec_processes,
896+
config.ACI_FIELD_CONTAINERS_EXEC_PROCESSES: exec_processes,
895897
config.ACI_FIELD_CONTAINERS_SIGNAL_CONTAINER_PROCESSES: [],
896898
config.ACI_FIELD_CONTAINERS_ALLOW_STDIO_ACCESS: not disable_stdio,
897899
config.ACI_FIELD_CONTAINERS_SECURITY_CONTEXT: case_insensitive_dict_get(

0 commit comments

Comments
 (0)