systemd/test/test-execute/exec-ambientcapabilities-dynuser.service

# SPDX-License-Identifier: LGPL-2.1-or-later
[Unit]
Description=Test for AmbientCapabilities (dynamic user)

[Service]
ExecStart=sh -x -c 'c=$$(grep "CapAmb:" /proc/self/status); test "$$c" = "CapAmb:	0000000000002081"'
Type=oneshot
AmbientCapabilities=CAP_CHOWN CAP_SETUID CAP_NET_RAW
DynamicUser=yes
PrivateUsers=yes
EnvironmentFile=-/usr/lib/systemd/systemd-asan-env
core: do not drop CAP_SETUID if it is in AmbientCapabilities= Follow-up for 24832d10b604848cf46624bb439c7fac27f3ce3f 2023-12-01 01:44:54 +00:00			`# SPDX-License-Identifier: LGPL-2.1-or-later`
			`[Unit]`
			`Description=Test for AmbientCapabilities (dynamic user)`

			`[Service]`
tests: use relative paths in ExecStart= and friends We want to retain some of the full paths in order to test more code paths. But the default should be to use the command name only. This makes the tests less visually cluttered. 2024-01-04 14:24:52 +00:00			`ExecStart=sh -x -c 'c=$$(grep "CapAmb:" /proc/self/status); test "$$c" = "CapAmb: 0000000000002081"'`
core: do not drop CAP_SETUID if it is in AmbientCapabilities= Follow-up for 24832d10b604848cf46624bb439c7fac27f3ce3f 2023-12-01 01:44:54 +00:00			`Type=oneshot`
			`AmbientCapabilities=CAP_CHOWN CAP_SETUID CAP_NET_RAW`
			`DynamicUser=yes`
			`PrivateUsers=yes`
test-execute: Load systemd-asan-env environment file if available When DynamicUser= is enabled, we need LD_PRELOAD to be configured correctly as the tests will load systemd's nss module which will complain when built with sanitizers if the sanitizer libraries were not loaded first. 2024-05-27 11:34:40 +00:00			`EnvironmentFile=-/usr/lib/systemd/systemd-asan-env`