systemd-stable/test/test-execute/exec-privatedevices-yes-with-group.service

# SPDX-License-Identifier: LGPL-2.1-or-later
[Unit]
Description=Test Group=group is applied after PrivateDevices=yes

[Service]
PrivateDevices=yes
Group=daemon
Type=oneshot

# Check the group applied
ExecStart=/bin/sh -x -c 'test "$$(id -n -g)" = "daemon"'

# Check that the namespace applied
ExecStart=/bin/sh -c 'test ! -c /dev/kmsg'

# Check that the owning group of a node is not daemon (should be the host root)
ExecStart=/bin/sh -x -c 'test ! "$$(stat -c %%G /dev/stderr)" = "daemon"'
tests: add spdx license header to test unit/link/network/conf files Those are all consumed by our parser, so they all support comments. I was considering whether they should have a license header at all, but in the end I decided to add it because those files are often created by copying parts of real unit files. And if the real ones have a license, then those might as well. It's easier to add it than to make an exception. 2021-10-17 19:07:22 +03:00			`# SPDX-License-Identifier: LGPL-2.1-or-later`
test: add test case for PrivateDevices=y and Group=daemon For root, group enforcement needs to come after PrivateDevices=y set up according to 096424d1230e0a0339735c51b43949809e972430. Add a test to verify this is the case. 2019-11-20 04:25:23 +03:00			`[Unit]`
			`Description=Test Group=group is applied after PrivateDevices=yes`

			`[Service]`
			`PrivateDevices=yes`
			`Group=daemon`
			`Type=oneshot`

			`# Check the group applied`
			`ExecStart=/bin/sh -x -c 'test "$$(id -n -g)" = "daemon"'`

			`# Check that the namespace applied`
			`ExecStart=/bin/sh -c 'test ! -c /dev/kmsg'`

			`# Check that the owning group of a node is not daemon (should be the host root)`
			`ExecStart=/bin/sh -x -c 'test ! "$$(stat -c %%G /dev/stderr)" = "daemon"'`