mirror of
https://github.com/systemd/systemd.git
synced 2024-11-01 00:51:24 +03:00
e975a94559
This adds a high level test verifying that syscall filtering in combination with a simple architecture filter for the "native" architecture works fine.
10 lines
270 B
Desktop File
10 lines
270 B
Desktop File
[Unit]
|
|
Description=Test for SystemCallFilter
|
|
|
|
[Service]
|
|
ExecStart=/bin/sh -c '/bin/echo "This should not be seen"'
|
|
Type=oneshot
|
|
LimitCORE=0
|
|
SystemCallArchitectures=native
|
|
SystemCallFilter=~write open execve fexecve execveat exit_group close mmap munmap fstat DONOTEXIST
|