[Unit] Description=Test for TemporaryFileSystem on /usr [Service] Type=oneshot # Check TemporaryFileSystem= are empty ExecStart=/bin/sh -c 'for i in $$(ls -A /usr); do test $$i = lib -o $$i = lib64 -o $$i = bin -o $$i = sbin || false; done' # Cannot create files under /usr ExecStart=/bin/sh -c '! touch /usr/hoge' ExecStart=/bin/sh -c '! touch /usr/bin/hoge' TemporaryFileSystem=/usr:ro BindReadOnlyPaths=-/usr/lib -/usr/lib64 /usr/bin /usr/sbin