summaryrefslogtreecommitdiff
path: root/test/test-execute/exec-capabilityambientset-merge-nfsnobody.service
diff options
context:
space:
mode:
authorRonny Chevalier <chevalier.ronny@gmail.com>2016-02-28 15:00:18 +0100
committerRonny Chevalier <chevalier.ronny@gmail.com>2016-02-28 15:00:18 +0100
commit50f130c286c4a4cb87a94a0fc419a4462a98a7a1 (patch)
tree219c364b9c4576504de91171e023a8d8e179cbc9 /test/test-execute/exec-capabilityambientset-merge-nfsnobody.service
parent19c0b0b9a5039b842cf9e6c3e7ece75fb8725602 (diff)
test-execute: add nfsnobody alternative as a nobody user
Diffstat (limited to 'test/test-execute/exec-capabilityambientset-merge-nfsnobody.service')
-rw-r--r--test/test-execute/exec-capabilityambientset-merge-nfsnobody.service9
1 files changed, 9 insertions, 0 deletions
diff --git a/test/test-execute/exec-capabilityambientset-merge-nfsnobody.service b/test/test-execute/exec-capabilityambientset-merge-nfsnobody.service
new file mode 100644
index 0000000000..00bec581b5
--- /dev/null
+++ b/test/test-execute/exec-capabilityambientset-merge-nfsnobody.service
@@ -0,0 +1,9 @@
+[Unit]
+Description=Test for AmbientCapabilities
+
+[Service]
+ExecStart=/bin/sh -x -c 'c=$$(grep "CapAmb:" /proc/self/status); test "$$c" = "CapAmb: 0000000000003000"'
+Type=oneshot
+User=nfsnobody
+AmbientCapabilities=CAP_NET_ADMIN
+AmbientCapabilities=CAP_NET_RAW