blob: e2b09e1550a3ce5f7cda32b265cf6cfd2704125a (
plain)
1
2
3
4
5
6
|
[Unit]
Description=Test for CapabilityBoundingSet
[Service]
ExecStart=/bin/sh -c 'c=$(capsh --print | grep "Bounding set " | grep "cap_chown"); echo $c; exit $(test -z $c)'
CapabilityBoundingSet=~CAP_CHOWN
|