test/test-execute/exec-systemcallfilter-system-user-nfsnobody.service

   1 [Unit]
   2 Description=Test for SystemCallFilter in system mode with User set
   3
   4 [Service]
   5 ExecStart=/bin/sh -c 'echo "Foo bar"'
   6 Type=oneshot
   7 User=nfsnobody
   8 SystemCallFilter=~read write open execve ioperm
   9 SystemCallFilter=ioctl
  10 SystemCallFilter=read write open execve
  11 SystemCallFilter=~ioperm