1 2 3 4 5 6 7
[Unit] Description=Test CAP_SYS_RAWIO capability for PrivateDevices=yes [Service] PrivateDevices=yes ExecStart=/bin/sh -x -c '! capsh --print | grep cap_sys_rawio' Type=oneshot