Yu Watanabe
b49a4696c4
If sh is not bash, some builtin command behave slightly differently. E.g. if sh is provided by busybox, its builtin test command does not check if the path is a mount point or not, and 'test -w' only checks the access mode of the inode. So, even if a readonly filesystem is mounted on a directory, the test command may succeed. To avoid such confusion, let's unconditionally use bash.
18 lines
482 B
Desktop File
18 lines
482 B
Desktop File
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
[Unit]
|
|
Description=Test Group=group is applied after PrivateDevices=yes
|
|
|
|
[Service]
|
|
PrivateDevices=yes
|
|
Group=daemon
|
|
Type=oneshot
|
|
|
|
# Check the group applied
|
|
ExecStart=bash -x -c 'test "$$(id -n -g)" = "daemon"'
|
|
|
|
# Check that the namespace applied
|
|
ExecStart=bash -c 'test ! -c /dev/kmsg'
|
|
|
|
# Check that the owning group of a node is not daemon (should be the host root)
|
|
ExecStart=bash -x -c 'test ! "$$(stat -c %%G /dev/stderr)" = "daemon"'
|