f98ca3a11d
echo is a built-in, so we were testing execve in our own code, and not in the running child.
9 lines
239 B
Desktop File
9 lines
239 B
Desktop File
[Unit]
|
|
Description=Test for SystemCallFilter
|
|
|
|
[Service]
|
|
ExecStart=/bin/sh -c '/bin/echo "This should not be seen"'
|
|
Type=oneshot
|
|
LimitCORE=0
|
|
SystemCallFilter=~write open execve fexecve execveat exit_group close mmap munmap fstat DONOTEXIST
|