File: exec-protectkernelmodules-no-capabilities.service

package info (click to toggle)
systemd 247.3-7%2Bdeb11u4
  • links: PTS, VCS
  • area: main
  • in suites: bullseye-updates
  • size: 71,320 kB
  • sloc: ansic: 459,704; xml: 82,646; python: 24,815; sh: 8,987; perl: 2,684; makefile: 275; awk: 93; lisp: 13; sed: 1
file content (8 lines) | stat: -rw-r--r-- 292 bytes parent folder | download | duplicates (2) 
1
2
3
4
5
6
7
8
 
[Unit]
Description=Test CAP_SYS_MODULE ProtectKernelModules=no

[Service]
ProtectKernelModules=no
# sed: remove dropped (cap_xxx-[epi]) and IAB capabilities from the output
ExecStart=/bin/sh -x -c 'capsh --print | sed -re "s/[^ ]+?\-[epi]+//g" -e '/IAB/d' | grep cap_sys_module'
Type=oneshot