test/test-execute/exec-systemcallfilter-system-user.service


1
2
3
4
5
6
7
8
9
10
11

[Unit]
Description=Test for SystemCallFilter in system mode with User set

[Service]
ExecStart=/bin/echo "Foo bar"
Type=oneshot
User=nobody
SystemCallFilter=~read write open execve ioperm
SystemCallFilter=ioctl
SystemCallFilter=read write open execve
SystemCallFilter=~ioperm