diff options
| author | Lennart Poettering <lennart@poettering.net> | 2016-10-13 18:36:29 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2016-10-13 18:36:29 +0200 |
| commit | 8bfdf29b2492f7df721d20455ee10b2fd158395b (patch) | |
| tree | cf83f461afa4925386f5d7467d3480d01c79e5c6 /test/test-execute/exec-protectkernelmodules-yes-capabilities.service | |
| parent | f5df066d1d28920e49cf03d5950330138ea4f236 (diff) | |
| parent | 4982dbcc300d4599aa6ac143e922d6fbee31a860 (diff) | |
Merge pull request #4243 from endocode/djalal/sandbox-first-protection-kernelmodules-v1
core:sandbox: Add ProtectKernelModules= and some fixes
Diffstat (limited to 'test/test-execute/exec-protectkernelmodules-yes-capabilities.service')
| -rw-r--r-- | test/test-execute/exec-protectkernelmodules-yes-capabilities.service | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/test/test-execute/exec-protectkernelmodules-yes-capabilities.service b/test/test-execute/exec-protectkernelmodules-yes-capabilities.service new file mode 100644 index 0000000000..84bf39be56 --- /dev/null +++ b/test/test-execute/exec-protectkernelmodules-yes-capabilities.service @@ -0,0 +1,7 @@ +[Unit] +Description=Test CAP_SYS_MODULE for ProtectKernelModules=yes + +[Service] +ProtectKernelModules=yes +ExecStart=/bin/sh -x -c '! capsh --print | grep cap_sys_module' +Type=oneshot |