Files
systemd/test/exec-capabilityboundingset-simple.service
T

7 lines
236 B
Desktop File

[Unit]
Description=Test for CapabilityBoundingSet
[Service]
ExecStart=/bin/sh -c 'c=$(capsh --print | grep "Bounding set " | cut -f 2 -d "="); echo $c; exit $(test $c = "cap_fowner,cap_kill")'
CapabilityBoundingSet=CAP_FOWNER CAP_KILL