Systemd/test/test-execute/exec-privatedevices-no-capability-sys-rawio.service

[Unit]
Description=Test CAP_SYS_RAWIO capability for PrivateDevices=no

[Service]
PrivateDevices=no
# sed: remove dropped capabilities (cap_xxx-[epi]) from the output
ExecStart=/bin/sh -x -c 'capsh --print | sed -r "s/[^ ]+?\-[epi]+//g" | grep cap_sys_rawio'
Type=oneshot
test: add test to make sure that CAP_SYS_RAWIO was removed on PrivateDevices=yes 2016-10-07 20:41:38 +02:00			`[Unit]`
			`Description=Test CAP_SYS_RAWIO capability for PrivateDevices=no`

			`[Service]`
			`PrivateDevices=no`
test: adapt to the new capsh format Since libcap v2.29 the format of cap_to_text() has been changed which makes certain `test-execute` subtest fail. Let's remove the offending part of the output (dropped capabilities) to make it compatible with both the old and the new libcap. 2020-02-04 13:49:01 +01:00			`# sed: remove dropped capabilities (cap_xxx-[epi]) from the output`
			`ExecStart=/bin/sh -x -c 'capsh --print \| sed -r "s/[^ ]+?\-[epi]+//g" \| grep cap_sys_rawio'`
test: add test to make sure that CAP_SYS_RAWIO was removed on PrivateDevices=yes 2016-10-07 20:41:38 +02:00			`Type=oneshot`