SymbX/systemd
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request #33727 from intelfx/work/analyze-capability-masks

Browse Source 
analyze: capability: add support for decoding capability masks
This commit is contained in:
Luca Boccassi
2024-07-25 11:08:21 +01:00
committed by GitHub
parent 268f58076f 3e7a029c28
commit 3bf483fc4f
5 changed files with 112 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/units/TEST-65-ANALYZE.sh
+9
View File
@@ -105,6 +105,15 @@ systemd-analyze capability cap_chown CAP_KILL
systemd-analyze capability 0 1 {30..32}
(! systemd-analyze capability cap_chown CAP_KILL "hello*")
(! systemd-analyze capability --global)
systemd-analyze capability -m 0000000000003c00
(! systemd-analyze capability -m 8000000000000000)
cap="$(systemd-analyze capability -m 0000000000003c00)"
[[ $cap != *cap_linux_immutable* ]]
[[ $cap == *cap_net_bind_service* ]]
[[ $cap == *cap_net_broadcast* ]]
[[ $cap == *cap_net_admin* ]]
[[ $cap == *cap_net_raw* ]]
[[ $cap != *cap_ipc_lock* ]]
# condition
mkdir -p /run/systemd/system
UNIT_NAME="analyze-condition-$RANDOM.service"