1# SPDX-License-Identifier: LGPL-2.1-or-later 2[Unit] 3Description=Test for SystemCallFilter in system mode with User set (daemon) 4 5[Service] 6ExecStart=/bin/sh -c 'echo "Foo bar"' 7Type=oneshot 8User=daemon 9SystemCallFilter=~read write open execve ioperm 10SystemCallFilter=ioctl 11SystemCallFilter=read write open execve 12SystemCallFilter=~ioperm 13