Add TestRunCapAddSYSTIME test case.

Signed-off-by: Yuan Sun <sunyuan3@huawei.com>
Upstream-commit: a5e2fa2b2e30cf515d22dee532ae33d5ab695008
Component: engine

components/engine/integration-cli/docker_cli_run_test.go

@@ -2776,3 +2776,7 @@ func (s *DockerSuite) TestAppArmorTraceSelf(c *check.C) {
 		c.Fatal("ptrace of self failed.")
 	}
 }
+
+func (s *DockerSuite) TestRunCapAddSYSTIME(c *check.C) {
+	dockerCmd(c, "run", "--cap-drop=ALL", "--cap-add=SYS_TIME", "busybox", "sh", "-c", "grep ^CapEff /proc/self/status | sed 's/^CapEff:\t//' | grep ^0000000002000000$")
+}