[Unit]

Description=Test for AmbientCapabilities

[Service]

ExecStart=/bin/sh -x -c 'c=$$(grep "CapAmb:" /proc/self/status); test "$$c" = "CapAmb: 0000000000003000"'

Type=oneshot

User=nobody

AmbientCapabilities=CAP_NET_ADMIN CAP_NET_RAW