test/test-execute/exec-privatedevices-no-capability-sys-rawio.service

   1 [Unit]
   2 Description=Test CAP_SYS_RAWIO capability for PrivateDevices=no
   3
   4 [Service]
   5 PrivateDevices=no
   6 # sed: remove dropped (cap_xxx-[epi]) and IAB capabilities from the output
   7 ExecStart=/bin/sh -x -c 'capsh --print | sed -re "s/[^ ]+?\-[epi]+//g" -e '/IAB/d' | grep cap_sys_rawio'
   8 Type=oneshot