mirror of
https://github.com/systemd/systemd
synced 2024-07-09 04:26:06 +00:00
63403f07b0
We want to retain *some* of the full paths in order to test more code paths. But the default should be to use the command name only. This makes the tests less visually cluttered.
10 lines
343 B
Desktop File
10 lines
343 B
Desktop File
# SPDX-License-Identifier: LGPL-2.1-or-later
|
|
[Unit]
|
|
Description=Test for CapabilityBoundingSet
|
|
|
|
[Service]
|
|
# sed: remove dropped (cap_xxx-[epi]) and IAB capabilities from the output
|
|
ExecStart=sh -x -c '! capsh --print | sed -re "s/[^ ]+?\-[epi]+//g" -e '/IAB/d' | grep "^Bounding set .*cap_chown"'
|
|
Type=oneshot
|
|
CapabilityBoundingSet=~CAP_CHOWN
|