test/test-execute/exec-systemcallfilter-system-user-nfsnobody.service

   1 # SPDX-License-Identifier: LGPL-2.1-or-later
   2 [Unit]
   3 Description=Test for SystemCallFilter in system mode with User set
   4
   5 [Service]
   6 ExecStart=sh -c 'echo "Foo bar"'
   7 Type=oneshot
   8 User=nfsnobody
   9 SystemCallFilter=~read write open execve ioperm
  10 SystemCallFilter=ioctl
  11 SystemCallFilter=read write open execve
  12 SystemCallFilter=~ioperm