# SPDX-License-Identifier: LGPL-2.1-or-later [Unit] Description=Test for NoExecPaths= [Service] Type=oneshot # This should work, as we explicitly disable the effect of NoExecPaths= ExecStart=+/bin/sh -c '/bin/cat /dev/null' # This should also work, as we do not disable the effect of NoExecPaths= but invert the exit code ExecStart=/bin/sh -x -c '! /bin/cat /dev/null' NoExecPaths=/bin/cat