From 5eab7a41a3b5419fd0ee0e68116b50fd72b4cdec Mon Sep 17 00:00:00 2001
From: Fabricio Voznika <fvoznika@google.com>
Date: Tue, 1 May 2018 09:44:58 -0700
Subject: Remove stale TODO

PiperOrigin-RevId: 194949678
Change-Id: I60a30c4bb7418e17583c66f437273fd17e9e99ba
---
 runsc/sandbox/sandbox.go | 2 --
 1 file changed, 2 deletions(-)

diff --git a/runsc/sandbox/sandbox.go b/runsc/sandbox/sandbox.go
index b2fa1d58e..64810b4ea 100644
--- a/runsc/sandbox/sandbox.go
+++ b/runsc/sandbox/sandbox.go
@@ -535,8 +535,6 @@ func (s *Sandbox) createSandboxProcess(conf *boot.Config, binPath string, common
 			nss = append(nss, userns)
 			setUIDGIDMappings(cmd, s.Spec)
 		} else {
-			// TODO: Retrict capabilities since it's using current user
-			// namespace, i.e. root.
 			log.Infof("Sandbox will be started in the current user namespace")
 		}
 		// When running in the caller's defined user namespace, apply the same
-- 
cgit v1.2.3