1 2 3 4 5 6 7
[Unit] Description=Test CAP_MKNOD capability for PrivateDevices=no [Service] PrivateDevices=no ExecStart=/bin/sh -x -c 'capsh --print | grep cap_mknod' Type=oneshot