1 2 3 4 5 6 7
[Unit] Description=Test CAP_SYSLOG for ProtectKernelLogs=yes [Service] ProtectKernelLogs=yes ExecStart=/bin/sh -x -c '! capsh --print | grep cap_syslog' Type=oneshot