[Unit] | |
Description=Test for AmbientCapabilities (daemon) | |
[Service] | |
ExecStart=/bin/sh -x -c 'c=$$(grep "CapAmb:" /proc/self/status); test "$$c" = "CapAmb: 0000000000002001"' | |
Type=oneshot | |
User=daemon | |
AmbientCapabilities=CAP_CHOWN | |
AmbientCapabilities=CAP_NET_RAW |