test/test-execute/exec-systemcallfilter-nonewprivileges-bounding1.service

   1 # SPDX-License-Identifier: LGPL-2.1-or-later
   2 [Unit]
   3 Description=Test bounding set is right with SystemCallFilter and non-root user
   4
   5 [Service]
   6 ExecStart=sh -x -c 'c=$$(capsh --print | grep "Bounding set "); test "$$c" = "Bounding set =cap_net_bind_service"'
   7 Type=oneshot
   8 User=1
   9 SystemCallFilter=@system-service
  10 CapabilityBoundingSet=CAP_NET_BIND_SERVICE