exec-protectkernelmodules-no-capabilities.service « test-execute « test - ~lukeshu/systemd - Unnamed repository; edit this file 'description' to name the repository.

summary refs log tree commit diff

path: root/test/test-execute/exec-protectkernelmodules-no-capabilities.service

blob: b2f2cd6b8ab0fcf23ec0ba87972104c7759c950d (plain)

[Unit]
Description=Test CAP_SYS_MODULE ProtectKernelModules=no

[Service]
ProtectKernelModules=no
ExecStart=/bin/sh -x -c 'capsh --print | grep cap_sys_module'
Type=oneshot