[Unit]Description=Test for CapabilityBoundingSet[Service]ExecStart=/bin/sh -x -c 'c=$$(capsh --print | grep "Bounding set "); test "$$c" = "Bounding set =cap_fowner,cap_kill"'Type=oneshotCapabilityBoundingSet=CAP_FOWNER CAP_KILL