diff options
| author | Daniel Mack <github@zonque.org> | 2016-03-21 12:57:43 +0100 |
|---|---|---|
| committer | Daniel Mack <github@zonque.org> | 2016-03-21 12:57:43 +0100 |
| commit | 68de79d6a42ac6da4268ac48b699a6cd553afc14 (patch) | |
| tree | d0e94499e8fb96fcd72adbafc90f8a2c668142bd /test/test-execute/exec-runtimedirectory-owner-nfsnobody.service | |
| parent | 19180aadb562d43811b1c4f961f0e0b778c132ce (diff) | |
| parent | 50f130c286c4a4cb87a94a0fc419a4462a98a7a1 (diff) | |
Merge pull request #2760 from ronnychevalier/rc/core_no_new_privileges_seccompv3
core: set NoNewPrivileges for seccomp if we don't have CAP_SYS_ADMIN
Diffstat (limited to 'test/test-execute/exec-runtimedirectory-owner-nfsnobody.service')
| -rw-r--r-- | test/test-execute/exec-runtimedirectory-owner-nfsnobody.service | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/test/test-execute/exec-runtimedirectory-owner-nfsnobody.service b/test/test-execute/exec-runtimedirectory-owner-nfsnobody.service new file mode 100644 index 0000000000..e962af8a4b --- /dev/null +++ b/test/test-execute/exec-runtimedirectory-owner-nfsnobody.service @@ -0,0 +1,9 @@ +[Unit] +Description=Test for RuntimeDirectory owner (must not be the default group of the user if Group is set) + +[Service] +ExecStart=/bin/sh -x -c 'group=$$(stat -c %%G /tmp/test-exec_runtimedirectory-owner); test "$$group" = "nfsnobody"' +Type=oneshot +Group=nfsnobody +User=root +RuntimeDirectory=test-exec_runtimedirectory-owner |