Hi,

I had some "issues?" where, when upgrading systemd from 1.257.8 to 1.257.13
I get different capabilities when I try to find out the capabilities of a
service. Note as that the service is masked. I read trough some of the
release notes and could not really find anything documenting this, so I was
unsure if I should create an Issue, or if there is some reason for this
change.

How to reproduce:
Using systemd 1.257.8
Mask a service and run something like:

systemctl show my-service | grep -E
'^User=|^Group=|^CapabilityBoundingSet=|^PrivateNetwork=|^AmbientCapabilities=|^DynamicUser='

Then do the same thing but when running systemd 1.257.13.

When I do this I get the same capabilities masked and unmasked on 1.257.8,
but when I switch to 1.257.13, I get additional network capabilities when
trying on the masked service, but when the service is not masked, I get the
"correct" capabilities.

Please let me know if I should add further details or if I am in the wrong
place or need to do anyhing differntly.

Regards,
Leo

Reply via email to