test/test-execute/exec-capabilityboundingset-merge.service

   1 # SPDX-License-Identifier: LGPL-2.1-or-later
   2 [Unit]
   3 Description=Test for CapabilityBoundingSet
   4
   5 [Service]
   6 ExecStart=/bin/sh -x -c 'c=$$(capsh --print | grep "Bounding set "); test "$$c" = "Bounding set =cap_chown,cap_fowner,cap_kill"'
   7 Type=oneshot
   8 CapabilityBoundingSet=CAP_FOWNER
   9 CapabilityBoundingSet=CAP_KILL CAP_CHOWN