blob: 8f8192cc9433baa7cec1b08c4edca1f2a551ae1a (
plain)
1
2
3
4
5
6
7
8
9
10
|
# SPDX-License-Identifier: LGPL-2.1-or-later
[Unit]
Description=Test bounding set is right with SystemCallFilter and non-root user
[Service]
ExecStart=/bin/sh -x -c 'c=$$(capsh --print | grep "Bounding set "); test "$$c" = "Bounding set =cap_net_bind_service"'
Type=oneshot
User=1
SystemCallFilter=@system-service
CapabilityBoundingSet=CAP_NET_BIND_SERVICE
|
