echo is a built-in, so we were testing execve in our own code, and not in
the running child.
Description=Test for SystemCallFilter
[Service]
-ExecStart=/bin/sh -c 'echo "This should not be seen"'
+ExecStart=/bin/sh -c '/bin/echo "This should not be seen"'
Type=oneshot
LimitCORE=0
SystemCallFilter=ioperm
Description=Test for SystemCallFilter
[Service]
-ExecStart=/bin/sh -c 'echo "This should not be seen"'
+ExecStart=/bin/sh -c '/bin/echo "This should not be seen"'
Type=oneshot
LimitCORE=0
-SystemCallFilter=~write open execve exit_group close mmap munmap fstat DONOTEXIST
+SystemCallFilter=~write open execve fexecve execveat exit_group close mmap munmap fstat DONOTEXIST