test/test-execute/exec-ambientcapabilities-dynuser.service

   1 # SPDX-License-Identifier: LGPL-2.1-or-later
   2 [Unit]
   3 Description=Test for AmbientCapabilities (dynamic user)
   4
   5 [Service]
   6 ExecStart=sh -x -c 'c=$$(grep "CapAmb:" /proc/self/status); test "$$c" = "CapAmb:       0000000000002081"'
   7 Type=oneshot
   8 AmbientCapabilities=CAP_CHOWN CAP_SETUID CAP_NET_RAW
   9 DynamicUser=yes
  10 PrivateUsers=yes