test: add test to make sure that CAP_SYS_RAWIO was removed on PrivateDevices=yes

2016-10-12 13:47:59 +02:00
parent 2cd0a73547
commit 625d8769fa
3 changed files with 16 additions and 0 deletions
@@ -140,6 +140,8 @@ static void test_exec_privatedevices_capabilities(Manager *m) {
        }
        test(m, "exec-privatedevices-yes-capability-mknod.service", 0, CLD_EXITED);
        test(m, "exec-privatedevices-no-capability-mknod.service", 0, CLD_EXITED);
+        test(m, "exec-privatedevices-yes-capability-sys-rawio.service", 0, CLD_EXITED);
+        test(m, "exec-privatedevices-no-capability-sys-rawio.service", 0, CLD_EXITED);
 }

 static void test_exec_protectkernelmodules_capabilities(Manager *m) {