systemd/test/test-execute/exec-capabilityboundingset-invert.service
2018-06-22 13:38:31 +02:00

8 lines
184 B
Desktop File

[Unit]
Description=Test for CapabilityBoundingSet
[Service]
ExecStart=/bin/sh -x -c '! capsh --print | grep "^Bounding set .*cap_chown"'
Type=oneshot
CapabilityBoundingSet=~CAP_CHOWN