systemd-stable/test/test-execute/exec-systemcallfilter-system-user-nfsnobody.service

[Unit]
Description=Test for SystemCallFilter in system mode with User set

[Service]
ExecStart=/bin/sh -c 'echo "Foo bar"'
Type=oneshot
User=nfsnobody
SystemCallFilter=~read write open execve ioperm
SystemCallFilter=ioctl
SystemCallFilter=read write open execve
SystemCallFilter=~ioperm
test-execute: add nfsnobody alternative as a nobody user 2016-02-28 17:00:18 +03:00			`[Unit]`
			`Description=Test for SystemCallFilter in system mode with User set`

			`[Service]`
test-execute: always use /bin/sh 2017-10-12 07:26:39 +03:00			`ExecStart=/bin/sh -c 'echo "Foo bar"'`
test-execute: add nfsnobody alternative as a nobody user 2016-02-28 17:00:18 +03:00			`Type=oneshot`
			`User=nfsnobody`
			`SystemCallFilter=~read write open execve ioperm`
			`SystemCallFilter=ioctl`
			`SystemCallFilter=read write open execve`
			`SystemCallFilter=~ioperm`