test: add tests for PrivateDevices= with '+' prefix

diff --git a/src/test/test-execute.c b/src/test/test-execute.c
index 2b5706822c0fe34f493ccc0d987bc2d6b240a1c7..4943bfa689e75c2bf20b3268fb4b2f662d001874 100644 (file)
--- a/src/test/test-execute.c
+++ b/src/test/test-execute.c
@@ -231,6 +231,7 @@ static void test_exec_privatedevices(Manager *m) {
 
         test(m, "exec-privatedevices-yes.service", 0, CLD_EXITED);
         test(m, "exec-privatedevices-no.service", 0, CLD_EXITED);
+        test(m, "exec-privatedevices-disabled-by-prefix.service", 0, CLD_EXITED);
 
         /* We use capsh to test if the capabilities are
          * properly set, so be sure that it exists */

diff --git a/test/meson.build b/test/meson.build
index c65e7e4538b328b1b5f7d63e07265061310b1d54..7c20788d0d024bad6af206a3d0f3d00fb3ec831b 100644 (file)
--- a/test/meson.build
+++ b/test/meson.build
@@ -81,6 +81,7 @@ test_data_files = '''
         test-execute/exec-personality-s390.service
         test-execute/exec-personality-x86-64.service
         test-execute/exec-personality-x86.service
+        test-execute/exec-privatedevices-disabled-by-prefix.service
         test-execute/exec-privatedevices-no-capability-mknod.service
         test-execute/exec-privatedevices-no-capability-sys-rawio.service
         test-execute/exec-privatedevices-no.service

diff --git a/test/test-execute/exec-privatedevices-disabled-by-prefix.service b/test/test-execute/exec-privatedevices-disabled-by-prefix.service
new file mode 100644 (file)
index 0000000..19b1da5
--- /dev/null
+++ b/test/test-execute/exec-privatedevices-disabled-by-prefix.service
@@ -0,0 +1,8 @@
+[Unit]
+Description=Test for PrivateDevices=yes with prefix
+
+[Service]
+ExecStart=/bin/sh -x -c '! test -c /dev/kmsg'
+ExecStart=+/bin/sh -x -c 'test -c /dev/kmsg'
+Type=oneshot
+PrivateDevices=yes